0000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1946.712595][T16161] loop4: detected capacity change from 0 to 224 [ 1946.713271][T16156] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:11:59 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:11:59 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8603, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1946.798019][T16173] loop4: detected capacity change from 0 to 224 [ 1946.806819][T16156] loop5: detected capacity change from 0 to 544 06:11:59 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d00200020002000200020002000200020002000200020000000000000000bbf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1946.839046][T16156] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:11:59 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xe00000000000000, 0x0, 0x40000006) 06:12:00 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8f00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000fe0000000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1946.942973][T16190] loop4: detected capacity change from 0 to 224 06:12:00 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d00200020002000200020002000200020002000200020000000000000000cbf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:00 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000100100000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1947.016384][T16206] loop5: detected capacity change from 0 to 544 [ 1947.025768][T16206] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:00 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x907f, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:00 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x1ac, 0x40000006) [ 1947.102536][T16219] loop4: detected capacity change from 0 to 224 [ 1947.121810][T16227] loop5: detected capacity change from 0 to 544 06:12:00 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d00200020002000200020002000200020002000200020000000000000000dbf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1947.160049][T16227] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:00 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xf00000000000000, 0x0, 0x40000006) 06:12:00 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x9127, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1947.241426][T16242] loop4: detected capacity change from 0 to 224 [ 1947.260204][T16227] loop5: detected capacity change from 0 to 544 [ 1947.273684][T16227] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:00 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d00200020002000200020002000200020002000200020000000000000000ebf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000f00100000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:00 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1947.360019][ C0] scsi_io_completion_action: 52 callbacks suppressed [ 1947.360049][ C0] sd 0:0:1:0: tag#597 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1947.376765][ C0] sd 0:0:1:0: tag#597 CDB: opcode=0xe5 (vendor) [ 1947.383037][ C0] sd 0:0:1:0: tag#597 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1947.391964][ C0] sd 0:0:1:0: tag#597 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1947.400922][ C0] sd 0:0:1:0: tag#597 CDB[20]: 2d [ 1947.424814][T16266] loop5: detected capacity change from 0 to 544 [ 1947.435995][T16269] loop4: detected capacity change from 0 to 224 06:12:00 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d00200020002000200020002000200020002000200020000000000000000fbf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1947.477295][T16266] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1947.487691][ C1] sd 0:0:1:0: tag#624 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1947.497769][ C1] sd 0:0:1:0: tag#624 CDB: opcode=0xe5 (vendor) [ 1947.504013][ C1] sd 0:0:1:0: tag#624 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1947.512960][ C1] sd 0:0:1:0: tag#624 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1947.521896][ C1] sd 0:0:1:0: tag#624 CDB[20]: 2d 06:12:00 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x9f01, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:00 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1947.572593][T16278] loop4: detected capacity change from 0 to 224 [ 1947.573029][T16266] loop5: detected capacity change from 0 to 544 06:12:00 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000010bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1947.628538][T16266] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1947.662946][ C1] sd 0:0:1:0: tag#597 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 06:12:00 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1947.673560][ C1] sd 0:0:1:0: tag#597 CDB: opcode=0xe5 (vendor) [ 1947.679888][ C1] sd 0:0:1:0: tag#597 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1947.688845][ C1] sd 0:0:1:0: tag#597 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1947.697792][ C1] sd 0:0:1:0: tag#597 CDB[20]: 2d [ 1947.729417][ C1] sd 0:0:1:0: tag#603 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1947.736558][ C0] sd 0:0:1:0: tag#605 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1947.739184][ C1] sd 0:0:1:0: tag#603 CDB: opcode=0xe5 (vendor) [ 1947.748906][ C0] sd 0:0:1:0: tag#605 CDB: opcode=0xe5 (vendor) [ 1947.755124][ C1] sd 0:0:1:0: tag#603 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1947.761341][ C0] sd 0:0:1:0: tag#605 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1947.770283][ C1] sd 0:0:1:0: tag#603 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1947.779206][ C0] sd 0:0:1:0: tag#605 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1947.788128][ C1] sd 0:0:1:0: tag#603 CDB[20]: 2d [ 1947.802084][ C0] sd 0:0:1:0: tag#605 CDB[20]: 2d [ 1947.808346][ C0] sd 0:0:1:0: tag#608 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1947.818453][ C0] sd 0:0:1:0: tag#608 CDB: opcode=0xe5 (vendor) 06:12:00 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x1ad, 0x40000006) 06:12:00 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1000000000000000, 0x0, 0x40000006) [ 1947.824717][ C0] sd 0:0:1:0: tag#608 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1947.833676][ C0] sd 0:0:1:0: tag#608 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1947.842635][ C0] sd 0:0:1:0: tag#608 CDB[20]: 2d [ 1947.852717][ C1] sd 0:0:1:0: tag#619 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1947.862512][ C1] sd 0:0:1:0: tag#619 CDB: opcode=0xe5 (vendor) [ 1947.868750][ C1] sd 0:0:1:0: tag#619 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 06:12:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000040200000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1947.877709][ C1] sd 0:0:1:0: tag#619 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1947.886666][ C1] sd 0:0:1:0: tag#619 CDB[20]: 2d [ 1947.892332][T16293] loop4: detected capacity change from 0 to 224 [ 1947.945612][ C0] sd 0:0:1:0: tag#622 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1947.955384][ C0] sd 0:0:1:0: tag#622 CDB: opcode=0xe5 (vendor) [ 1947.961665][ C0] sd 0:0:1:0: tag#622 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1947.970638][ C0] sd 0:0:1:0: tag#622 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1947.979600][ C0] sd 0:0:1:0: tag#622 CDB[20]: 2d [ 1948.005333][T16316] loop5: detected capacity change from 0 to 544 06:12:01 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000011bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1948.053331][T16316] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1948.078205][ C1] sd 0:0:1:0: tag#583 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1948.088009][ C1] sd 0:0:1:0: tag#583 CDB: opcode=0xe5 (vendor) [ 1948.094268][ C1] sd 0:0:1:0: tag#583 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 06:12:01 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:01 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xb205, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1948.103220][ C1] sd 0:0:1:0: tag#583 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1948.112236][ C1] sd 0:0:1:0: tag#583 CDB[20]: 2d 06:12:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x281, 0x40000006) [ 1948.171333][ C1] sd 0:0:1:0: tag#595 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1948.173038][T16322] loop4: detected capacity change from 0 to 224 [ 1948.181200][ C1] sd 0:0:1:0: tag#595 CDB: opcode=0xe5 (vendor) [ 1948.193668][ C1] sd 0:0:1:0: tag#595 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1948.202647][ C1] sd 0:0:1:0: tag#595 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1948.211579][ C1] sd 0:0:1:0: tag#595 CDB[20]: 2d 06:12:01 executing program 2 (fault-call:11 fault-nth:0): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:01 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000012bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x300, 0x40000006) [ 1948.277479][T16316] loop5: detected capacity change from 0 to 544 [ 1948.290145][T16316] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1948.327409][T16344] FAULT_INJECTION: forcing a failure. [ 1948.327409][T16344] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.340242][T16344] CPU: 1 PID: 16344 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1948.350061][T16344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1948.360249][T16344] Call Trace: [ 1948.363643][T16344] dump_stack_lvl+0xb7/0x103 [ 1948.366978][T16352] loop4: detected capacity change from 0 to 224 [ 1948.368232][T16344] dump_stack+0x11/0x1a [ 1948.368256][T16344] should_fail+0x23c/0x250 [ 1948.383123][T16344] ? kcalloc+0x32/0x50 [ 1948.387183][T16344] __should_failslab+0x81/0x90 [ 1948.391952][T16344] should_failslab+0x5/0x20 [ 1948.396487][T16344] __kmalloc+0x66/0x340 [ 1948.400719][T16344] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1948.406901][T16344] kcalloc+0x32/0x50 [ 1948.410782][T16344] ext4_find_extent+0x21c/0x7f0 [ 1948.415743][T16344] ext4_ext_map_blocks+0xd9/0x1f10 [ 1948.420842][T16344] ? __perf_event_account_interrupt+0x114/0x1e0 [ 1948.427404][T16344] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 1948.433221][T16344] ? __down_read_common+0x16d/0x530 [ 1948.438435][T16344] ? percpu_counter_add_batch+0xc0/0xd0 [ 1948.443993][T16344] ? ext4_es_lookup_extent+0x206/0x490 [ 1948.449437][T16344] ext4_map_blocks+0x1be/0xef0 [ 1948.454190][T16344] ? ext4_alloc_file_blocks+0x248/0x720 [ 1948.459722][T16344] ? __cond_resched+0x11/0x40 [ 1948.464403][T16344] ext4_alloc_file_blocks+0x271/0x720 [ 1948.469762][T16344] ext4_fallocate+0x2a7/0x4d0 [ 1948.474424][T16344] ? ext4_ext_truncate+0x170/0x170 [ 1948.479520][T16344] vfs_fallocate+0x459/0x6a0 [ 1948.484096][T16344] __x64_sys_fallocate+0x75/0xc0 [ 1948.489019][T16344] do_syscall_64+0x3d/0x90 [ 1948.493481][T16344] ? irqentry_exit+0xe/0x30 [ 1948.497998][T16344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1948.503937][T16344] RIP: 0033:0x4665f9 [ 1948.507872][T16344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:12:01 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1100000000000000, 0x0, 0x40000006) 06:12:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000f0200000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1948.527483][T16344] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1948.535881][T16344] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1948.543848][T16344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1948.551815][T16344] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1948.559773][T16344] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000001 [ 1948.567733][T16344] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:01 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000018bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:01 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xbf00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1948.640922][T16366] loop5: detected capacity change from 0 to 544 [ 1948.677254][T16368] loop4: detected capacity change from 0 to 224 06:12:01 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000019bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1948.688232][T16366] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1948.770971][T16366] loop5: detected capacity change from 0 to 544 [ 1948.787974][T16366] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1948.811828][T16387] loop4: detected capacity change from 0 to 224 06:12:01 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000022bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000180200000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:01 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1200000000000000, 0x0, 0x40000006) 06:12:01 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xcf00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1948.894460][T16399] loop4: detected capacity change from 0 to 224 [ 1948.910416][T16403] loop5: detected capacity change from 0 to 544 [ 1948.948878][T16403] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:02 executing program 2 (fault-call:11 fault-nth:1): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:02 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000025bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:02 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x301, 0x40000006) 06:12:02 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x2000000000000000, 0x0, 0x40000006) [ 1949.040781][T16403] loop5: detected capacity change from 0 to 544 [ 1949.057916][T16403] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1949.095778][T16427] loop4: detected capacity change from 0 to 224 [ 1949.115278][T16423] FAULT_INJECTION: forcing a failure. [ 1949.115278][T16423] name failslab, interval 1, probability 0, space 0, times 0 [ 1949.128210][T16423] CPU: 1 PID: 16423 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1949.138205][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1949.148258][T16423] Call Trace: [ 1949.151554][T16423] dump_stack_lvl+0xb7/0x103 [ 1949.156224][T16423] dump_stack+0x11/0x1a [ 1949.160416][T16423] should_fail+0x23c/0x250 [ 1949.164832][T16423] ? __es_insert_extent+0x51f/0xe70 [ 1949.170029][T16423] __should_failslab+0x81/0x90 [ 1949.174900][T16423] should_failslab+0x5/0x20 [ 1949.179406][T16423] kmem_cache_alloc+0x46/0x2e0 [ 1949.184180][T16423] __es_insert_extent+0x51f/0xe70 [ 1949.189198][T16423] ? avc_has_perm_noaudit+0x19a/0x240 06:12:02 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xd383, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:02 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000048bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1949.194597][T16423] ? should_fail+0xd6/0x250 [ 1949.199105][T16423] ext4_es_cache_extent+0x20e/0x2c0 [ 1949.204367][T16423] ext4_find_extent+0x3ed/0x7f0 [ 1949.209229][T16423] ext4_ext_map_blocks+0xd9/0x1f10 [ 1949.214331][T16423] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1949.220494][T16423] ? __down_read_common+0x16d/0x530 [ 1949.225693][T16423] ? percpu_counter_add_batch+0x69/0xd0 [ 1949.231245][T16423] ? ext4_es_lookup_extent+0x206/0x490 [ 1949.236698][T16423] ext4_map_blocks+0x1be/0xef0 [ 1949.241501][T16423] ? ext4_alloc_file_blocks+0x248/0x720 [ 1949.247049][T16423] ? __cond_resched+0x11/0x40 [ 1949.251718][T16423] ext4_alloc_file_blocks+0x271/0x720 [ 1949.257087][T16423] ext4_fallocate+0x2a7/0x4d0 [ 1949.261756][T16423] ? ext4_ext_truncate+0x170/0x170 [ 1949.266859][T16423] vfs_fallocate+0x459/0x6a0 [ 1949.271539][T16423] __x64_sys_fallocate+0x75/0xc0 [ 1949.276468][T16423] do_syscall_64+0x3d/0x90 [ 1949.280883][T16423] ? irqentry_exit+0xe/0x30 [ 1949.285424][T16423] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1949.291321][T16423] RIP: 0033:0x4665f9 [ 1949.295209][T16423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1949.315160][T16423] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1949.323558][T16423] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1949.331558][T16423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 06:12:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000200200000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1949.339590][T16423] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1949.347542][T16423] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000001 [ 1949.355504][T16423] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:02 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x3f00000000000000, 0x0, 0x40000006) 06:12:02 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x304, 0x40000006) 06:12:02 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d00200020002000200020002000200020002000200020000000000000004cbf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:02 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xee00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1949.426340][T16450] loop4: detected capacity change from 0 to 224 [ 1949.442449][T16451] loop5: detected capacity change from 0 to 544 [ 1949.464243][T16451] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:02 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000068bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1949.502859][T16461] loop4: detected capacity change from 0 to 224 [ 1949.516142][T16451] loop5: detected capacity change from 0 to 544 [ 1949.527525][T16451] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1949.603769][T16475] loop4: detected capacity change from 0 to 224 06:12:02 executing program 2 (fault-call:11 fault-nth:2): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000300000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:02 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d00200020002000200020002000200020002000200020000000000000006cbf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:02 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x8102000000000000, 0x0, 0x40000006) 06:12:02 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x3fc, 0x40000006) 06:12:02 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfeff, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1949.822379][T16497] loop5: detected capacity change from 0 to 544 [ 1949.830217][T16501] loop4: detected capacity change from 0 to 224 [ 1949.853822][T16505] FAULT_INJECTION: forcing a failure. [ 1949.853822][T16505] name failslab, interval 1, probability 0, space 0, times 0 [ 1949.866937][T16505] CPU: 1 PID: 16505 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1949.870322][T16497] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1949.876744][T16505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1949.876793][T16505] Call Trace: [ 1949.900076][T16505] dump_stack_lvl+0xb7/0x103 [ 1949.904775][T16505] dump_stack+0x11/0x1a [ 1949.908936][T16505] should_fail+0x23c/0x250 [ 1949.913438][T16505] ? __es_insert_extent+0x51f/0xe70 [ 1949.918626][T16505] __should_failslab+0x81/0x90 [ 1949.923459][T16505] should_failslab+0x5/0x20 [ 1949.923481][T16505] kmem_cache_alloc+0x46/0x2e0 [ 1949.923499][T16505] ? __es_insert_extent+0xbf3/0xe70 [ 1949.938004][T16505] __es_insert_extent+0x51f/0xe70 [ 1949.943032][T16505] ext4_es_insert_extent+0x1bb/0x19d0 [ 1949.948460][T16505] ? ext4_ext_map_blocks+0xf6d/0x1f10 [ 1949.953829][T16505] ext4_ext_map_blocks+0xf89/0x1f10 [ 1949.959094][T16505] ? __down_read_common+0x16d/0x530 [ 1949.964318][T16505] ? percpu_counter_add_batch+0x69/0xd0 [ 1949.969871][T16505] ? ext4_es_lookup_extent+0x206/0x490 [ 1949.975386][T16505] ext4_map_blocks+0x1be/0xef0 [ 1949.980200][T16505] ? __sanitizer_cov_trace_pc+0x51/0x60 [ 1949.985785][T16505] ? ext4_alloc_file_blocks+0x248/0x720 [ 1949.991395][T16505] ? __cond_resched+0x11/0x40 [ 1949.996055][T16505] ext4_alloc_file_blocks+0x271/0x720 [ 1950.001446][T16505] ext4_fallocate+0x2a7/0x4d0 [ 1950.006194][T16505] ? ext4_ext_truncate+0x170/0x170 [ 1950.011345][T16505] vfs_fallocate+0x459/0x6a0 [ 1950.015920][T16505] __x64_sys_fallocate+0x75/0xc0 [ 1950.020873][T16505] do_syscall_64+0x3d/0x90 [ 1950.025381][T16505] ? irqentry_exit+0xe/0x30 [ 1950.029880][T16505] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1950.035798][T16505] RIP: 0033:0x4665f9 [ 1950.039843][T16505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1950.059439][T16505] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d 06:12:03 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000074bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1950.067927][T16505] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1950.076108][T16505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1950.084151][T16505] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1950.093020][T16505] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000001 [ 1950.101852][T16505] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:03 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xcb130200ffffffff, 0x0, 0x40000006) [ 1950.145787][T16497] loop5: detected capacity change from 0 to 544 [ 1950.174245][T16497] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000020400000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:03 executing program 2 (fault-call:11 fault-nth:3): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1950.233014][T16519] loop4: detected capacity change from 0 to 224 06:12:03 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x403, 0x40000006) 06:12:03 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff02, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:03 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d00200020002000200020002000200020002000200020000000000000007abf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:03 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xf4ffffff00000000, 0x0, 0x40000006) [ 1950.296169][T16540] loop5: detected capacity change from 0 to 544 [ 1950.322351][T16540] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1950.356010][T16549] FAULT_INJECTION: forcing a failure. [ 1950.356010][T16549] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.368893][T16549] CPU: 1 PID: 16549 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1950.378731][T16549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1950.388783][T16549] Call Trace: [ 1950.392317][T16549] dump_stack_lvl+0xb7/0x103 [ 1950.396907][T16549] dump_stack+0x11/0x1a [ 1950.401061][T16549] should_fail+0x23c/0x250 [ 1950.405519][T16549] ? kcalloc+0x32/0x50 [ 1950.409672][T16549] __should_failslab+0x81/0x90 [ 1950.414430][T16549] should_failslab+0x5/0x20 [ 1950.418924][T16549] __kmalloc+0x66/0x340 [ 1950.423064][T16549] kcalloc+0x32/0x50 [ 1950.426950][T16549] ext4_find_extent+0x21c/0x7f0 [ 1950.431788][T16549] ? kfree+0xf0/0x1d0 [ 1950.435754][T16549] ext4_ext_map_blocks+0xd9/0x1f10 [ 1950.440899][T16549] ? __down_write_common+0x42/0x810 [ 1950.446111][T16549] ? __down_read_common+0x16d/0x530 [ 1950.451300][T16549] ? percpu_counter_add_batch+0x69/0xd0 [ 1950.456876][T16549] ? ext4_es_lookup_extent+0x206/0x490 [ 1950.462329][T16549] ext4_map_blocks+0x70d/0xef0 [ 1950.467093][T16549] ? ext4_alloc_file_blocks+0x248/0x720 [ 1950.472638][T16549] ? __cond_resched+0x11/0x40 [ 1950.477313][T16549] ext4_alloc_file_blocks+0x271/0x720 [ 1950.482704][T16549] ext4_fallocate+0x2a7/0x4d0 [ 1950.487410][T16549] ? ext4_ext_truncate+0x170/0x170 [ 1950.492508][T16549] vfs_fallocate+0x459/0x6a0 [ 1950.497103][T16549] __x64_sys_fallocate+0x75/0xc0 [ 1950.502075][T16549] do_syscall_64+0x3d/0x90 [ 1950.506629][T16549] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1950.512538][T16549] RIP: 0033:0x4665f9 [ 1950.516412][T16549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1950.536010][T16549] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1950.544404][T16549] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1950.552402][T16549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1950.560353][T16549] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1950.568379][T16549] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000001 [ 1950.576332][T16549] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1950.584981][T16548] loop4: detected capacity change from 0 to 224 06:12:03 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x404, 0x40000006) 06:12:03 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000cfbf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1950.623932][T16540] loop5: detected capacity change from 0 to 544 [ 1950.663025][T16540] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:03 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff05, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:03 executing program 2 (fault-call:11 fault-nth:4): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1950.715348][T16573] loop4: detected capacity change from 0 to 224 [ 1950.735364][T16577] FAULT_INJECTION: forcing a failure. [ 1950.735364][T16577] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.748228][T16577] CPU: 0 PID: 16577 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1950.758069][T16577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1950.768120][T16577] Call Trace: [ 1950.771389][T16577] dump_stack_lvl+0xb7/0x103 [ 1950.776030][T16577] dump_stack+0x11/0x1a [ 1950.780180][T16577] should_fail+0x23c/0x250 [ 1950.784666][T16577] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1950.790058][T16577] __should_failslab+0x81/0x90 [ 1950.794823][T16577] should_failslab+0x5/0x20 [ 1950.799365][T16577] kmem_cache_alloc+0x46/0x2e0 [ 1950.804119][T16577] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1950.809354][T16577] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1950.815162][T16577] ext4_ext_map_blocks+0x1579/0x1f10 [ 1950.820448][T16577] ? __down_write_common+0x42/0x810 [ 1950.825649][T16577] ? __down_read_common+0x16d/0x530 [ 1950.830842][T16577] ? percpu_counter_add_batch+0x69/0xd0 [ 1950.836421][T16577] ext4_map_blocks+0x70d/0xef0 [ 1950.841180][T16577] ? ext4_alloc_file_blocks+0x248/0x720 [ 1950.846724][T16577] ? __cond_resched+0x11/0x40 [ 1950.851405][T16577] ext4_alloc_file_blocks+0x271/0x720 [ 1950.856919][T16577] ext4_fallocate+0x2a7/0x4d0 06:12:03 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xfbffffff00000000, 0x0, 0x40000006) 06:12:03 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000d1bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1950.861606][T16577] ? ext4_ext_truncate+0x170/0x170 [ 1950.866708][T16577] vfs_fallocate+0x459/0x6a0 [ 1950.871295][T16577] __x64_sys_fallocate+0x75/0xc0 [ 1950.876229][T16577] do_syscall_64+0x3d/0x90 [ 1950.880643][T16577] ? irqentry_exit+0xe/0x30 [ 1950.885140][T16577] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1950.891050][T16577] RIP: 0033:0x4665f9 [ 1950.894983][T16577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:12:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000060400000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:04 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x486, 0x40000006) 06:12:04 executing program 2 (fault-call:11 fault-nth:5): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1950.914686][T16577] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1950.923161][T16577] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1950.931157][T16577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1950.939152][T16577] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1950.947116][T16577] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000001 [ 1950.955188][T16577] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1951.006902][T16595] loop4: detected capacity change from 0 to 224 [ 1951.032898][T16598] loop5: detected capacity change from 0 to 544 [ 1951.034119][T16601] FAULT_INJECTION: forcing a failure. [ 1951.034119][T16601] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.051914][T16601] CPU: 1 PID: 16601 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1951.061717][T16601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1951.071852][T16601] Call Trace: [ 1951.075119][T16601] dump_stack_lvl+0xb7/0x103 [ 1951.079809][T16601] dump_stack+0x11/0x1a [ 1951.083946][T16601] should_fail+0x23c/0x250 [ 1951.088354][T16601] ? ext4_mb_new_blocks+0x70f/0x1f90 [ 1951.093698][T16601] __should_failslab+0x81/0x90 [ 1951.098444][T16601] should_failslab+0x5/0x20 [ 1951.102979][T16601] kmem_cache_alloc+0x46/0x2e0 [ 1951.107727][T16601] ext4_mb_new_blocks+0x70f/0x1f90 [ 1951.112826][T16601] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1951.118614][T16601] ? ext4_ext_search_right+0x2e3/0x540 [ 1951.124062][T16601] ext4_ext_map_blocks+0x1579/0x1f10 [ 1951.129339][T16601] ? __down_write_common+0x42/0x810 [ 1951.134540][T16601] ? __down_read_common+0x16d/0x530 [ 1951.139722][T16601] ? percpu_counter_add_batch+0x69/0xd0 [ 1951.145267][T16601] ext4_map_blocks+0x70d/0xef0 [ 1951.150018][T16601] ? ext4_alloc_file_blocks+0x248/0x720 [ 1951.155562][T16601] ? __cond_resched+0x11/0x40 [ 1951.160228][T16601] ext4_alloc_file_blocks+0x271/0x720 [ 1951.165588][T16601] ext4_fallocate+0x2a7/0x4d0 [ 1951.170256][T16601] ? ext4_ext_truncate+0x170/0x170 [ 1951.175356][T16601] vfs_fallocate+0x459/0x6a0 [ 1951.179959][T16601] __x64_sys_fallocate+0x75/0xc0 [ 1951.185168][T16601] do_syscall_64+0x3d/0x90 [ 1951.189576][T16601] ? irqentry_exit+0xe/0x30 [ 1951.194313][T16601] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1951.200206][T16601] RIP: 0033:0x4665f9 [ 1951.204080][T16601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.223810][T16601] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1951.232204][T16601] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1951.240170][T16601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1951.248121][T16601] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 06:12:04 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xfefeffff00000000, 0x0, 0x40000006) 06:12:04 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000debf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:04 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff08, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1951.256078][T16601] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000001 [ 1951.264034][T16601] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1951.333146][T16615] loop4: detected capacity change from 0 to 224 06:12:04 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000dfbf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:04 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xfeffffff00000000, 0x0, 0x40000006) 06:12:04 executing program 2 (fault-call:11 fault-nth:6): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:04 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x500, 0x40000006) [ 1951.382366][T16598] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1951.437378][T16625] FAULT_INJECTION: forcing a failure. [ 1951.437378][T16625] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.450131][T16625] CPU: 1 PID: 16625 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1951.460024][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1951.470152][T16625] Call Trace: [ 1951.473429][T16625] dump_stack_lvl+0xb7/0x103 [ 1951.478018][T16625] dump_stack+0x11/0x1a [ 1951.482200][T16625] should_fail+0x23c/0x250 [ 1951.486637][T16625] ? __es_insert_extent+0x51f/0xe70 [ 1951.491920][T16625] __should_failslab+0x81/0x90 [ 1951.496683][T16625] should_failslab+0x5/0x20 [ 1951.501194][T16625] kmem_cache_alloc+0x46/0x2e0 [ 1951.505959][T16625] __es_insert_extent+0x51f/0xe70 [ 1951.510984][T16625] ? ext4_ext_map_blocks+0x10b8/0x1f10 [ 1951.516511][T16625] ext4_es_insert_extent+0x1bb/0x19d0 [ 1951.521875][T16625] ext4_map_blocks+0xa4c/0xef0 [ 1951.526644][T16625] ? ext4_alloc_file_blocks+0x248/0x720 [ 1951.532196][T16625] ? __cond_resched+0x11/0x40 [ 1951.536889][T16625] ext4_alloc_file_blocks+0x271/0x720 [ 1951.542345][T16625] ext4_fallocate+0x2a7/0x4d0 [ 1951.547011][T16625] ? ext4_ext_truncate+0x170/0x170 [ 1951.552145][T16625] vfs_fallocate+0x459/0x6a0 [ 1951.556815][T16625] __x64_sys_fallocate+0x75/0xc0 [ 1951.561763][T16625] do_syscall_64+0x3d/0x90 [ 1951.566273][T16625] ? irqentry_exit+0xe/0x30 [ 1951.570767][T16625] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1951.576709][T16625] RIP: 0033:0x4665f9 [ 1951.580653][T16625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.604858][T16625] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1951.614032][T16625] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1951.622029][T16625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1951.629997][T16625] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 06:12:04 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff0b, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1951.637968][T16625] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000001 [ 1951.645940][T16625] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1951.660692][T16634] loop4: detected capacity change from 0 to 224 06:12:04 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000febf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1951.682662][T16598] loop5: detected capacity change from 0 to 544 [ 1951.703615][T16598] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000100400000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:04 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x600, 0x40000006) 06:12:04 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xff01000000000000, 0x0, 0x40000006) 06:12:04 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf020000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1951.754412][T16652] loop4: detected capacity change from 0 to 224 06:12:04 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff0c, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1951.869004][T16672] loop5: detected capacity change from 0 to 544 [ 1951.877957][T16676] loop4: detected capacity change from 0 to 224 06:12:05 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf030000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1951.912499][T16672] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:05 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x700, 0x40000006) 06:12:05 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf040000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1951.994167][T16672] loop5: detected capacity change from 0 to 544 [ 1952.006619][T16672] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1952.028153][T16693] loop4: detected capacity change from 0 to 224 06:12:05 executing program 2 (fault-call:11 fault-nth:7): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:05 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff0f, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000500000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:05 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xff07000000000000, 0x0, 0x40000006) [ 1952.113191][T16706] loop4: detected capacity change from 0 to 224 06:12:05 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf050000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1952.163739][T16713] loop5: detected capacity change from 0 to 544 [ 1952.187591][T16713] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1952.223639][T16719] FAULT_INJECTION: forcing a failure. [ 1952.223639][T16719] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.236383][T16719] CPU: 0 PID: 16719 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1952.246213][T16719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1952.253714][T16724] loop4: detected capacity change from 0 to 224 [ 1952.256383][T16719] Call Trace: [ 1952.256392][T16719] dump_stack_lvl+0xb7/0x103 [ 1952.270486][T16719] dump_stack+0x11/0x1a [ 1952.274951][T16719] should_fail+0x23c/0x250 [ 1952.279442][T16719] ? kcalloc+0x32/0x50 [ 1952.283504][T16719] __should_failslab+0x81/0x90 [ 1952.288261][T16719] should_failslab+0x5/0x20 [ 1952.292781][T16719] __kmalloc+0x66/0x340 [ 1952.296923][T16719] ? chksum_update+0x39/0x50 [ 1952.301514][T16719] kcalloc+0x32/0x50 [ 1952.305397][T16719] ext4_find_extent+0x21c/0x7f0 [ 1952.310231][T16719] ext4_ext_map_blocks+0xd9/0x1f10 [ 1952.315402][T16719] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1952.321205][T16719] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1952.327351][T16719] ? __down_write_common+0x42/0x810 [ 1952.332537][T16719] ? percpu_counter_add_batch+0x5f/0xd0 [ 1952.338088][T16719] ? ext4_es_lookup_extent+0x217/0x490 [ 1952.343535][T16719] ext4_map_blocks+0x70d/0xef0 [ 1952.348386][T16719] ? ext4_alloc_file_blocks+0x248/0x720 [ 1952.353994][T16719] ? __cond_resched+0x11/0x40 [ 1952.358671][T16719] ext4_alloc_file_blocks+0x271/0x720 [ 1952.364035][T16719] ext4_fallocate+0x2a7/0x4d0 [ 1952.368766][T16719] ? ext4_ext_truncate+0x170/0x170 [ 1952.373861][T16719] vfs_fallocate+0x459/0x6a0 [ 1952.378439][T16719] __x64_sys_fallocate+0x75/0xc0 [ 1952.383450][T16719] do_syscall_64+0x3d/0x90 [ 1952.387858][T16719] ? irqentry_exit+0xe/0x30 [ 1952.392345][T16719] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1952.398268][T16719] RIP: 0033:0x4665f9 [ 1952.402144][T16719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.421735][T16719] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1952.430192][T16719] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1952.438161][T16719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1952.446126][T16719] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.454144][T16719] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000001 [ 1952.462220][T16719] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1952.484322][T16713] loop5: detected capacity change from 0 to 544 [ 1952.496512][T16713] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000600000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:05 executing program 2 (fault-call:11 fault-nth:8): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:05 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf060000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1952.566179][ C0] scsi_io_completion_action: 45 callbacks suppressed [ 1952.566204][ C0] sd 0:0:1:0: tag#582 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1952.582677][ C0] sd 0:0:1:0: tag#582 CDB: opcode=0xe5 (vendor) [ 1952.588479][T16742] loop5: detected capacity change from 0 to 544 [ 1952.588942][ C0] sd 0:0:1:0: tag#582 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1952.604138][ C0] sd 0:0:1:0: tag#582 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 06:12:05 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xff0f000000000000, 0x0, 0x40000006) [ 1952.613103][ C0] sd 0:0:1:0: tag#582 CDB[20]: 2d [ 1952.628970][T16742] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1952.640220][ C0] sd 0:0:1:0: tag#590 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1952.649969][ C0] sd 0:0:1:0: tag#590 CDB: opcode=0xe5 (vendor) [ 1952.656224][ C0] sd 0:0:1:0: tag#590 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1952.665172][ C0] sd 0:0:1:0: tag#590 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1952.674133][ C0] sd 0:0:1:0: tag#590 CDB[20]: 2d [ 1952.683303][ C1] sd 0:0:1:0: tag#599 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1952.693056][ C1] sd 0:0:1:0: tag#599 CDB: opcode=0xe5 (vendor) [ 1952.695626][ C0] sd 0:0:1:0: tag#600 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 06:12:05 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x900, 0x40000006) [ 1952.699412][ C1] sd 0:0:1:0: tag#599 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1952.709119][ C0] sd 0:0:1:0: tag#600 CDB: opcode=0xe5 (vendor) [ 1952.718033][ C1] sd 0:0:1:0: tag#599 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1952.724258][ C0] sd 0:0:1:0: tag#600 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1952.733176][ C1] sd 0:0:1:0: tag#599 CDB[20]: 2d [ 1952.742096][ C0] sd 0:0:1:0: tag#600 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1952.756641][ C0] sd 0:0:1:0: tag#600 CDB[20]: 2d [ 1952.771795][T16754] FAULT_INJECTION: forcing a failure. [ 1952.771795][T16754] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.784610][T16754] CPU: 1 PID: 16754 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1952.794466][T16754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1952.802261][T16761] loop4: detected capacity change from 0 to 224 [ 1952.804681][T16754] Call Trace: [ 1952.804689][T16754] dump_stack_lvl+0xb7/0x103 [ 1952.819776][T16754] dump_stack+0x11/0x1a [ 1952.823954][T16754] should_fail+0x23c/0x250 [ 1952.828377][T16754] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1952.833655][T16754] __should_failslab+0x81/0x90 [ 1952.838671][T16754] should_failslab+0x5/0x20 [ 1952.843163][T16754] kmem_cache_alloc+0x46/0x2e0 [ 1952.847910][T16754] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1952.853131][T16754] ? ext4_find_extent+0x7b2/0x7f0 [ 1952.858144][T16754] ? ext4_ext_search_right+0x2e3/0x540 [ 1952.863586][T16754] ext4_ext_map_blocks+0x1579/0x1f10 [ 1952.868903][T16754] ext4_map_blocks+0x70d/0xef0 [ 1952.873716][T16754] ? ext4_alloc_file_blocks+0x248/0x720 [ 1952.879260][T16754] ? __cond_resched+0x11/0x40 [ 1952.883938][T16754] ext4_alloc_file_blocks+0x271/0x720 [ 1952.889358][T16754] ext4_fallocate+0x2a7/0x4d0 [ 1952.894029][T16754] ? ext4_ext_truncate+0x170/0x170 [ 1952.899197][T16754] vfs_fallocate+0x459/0x6a0 [ 1952.903820][T16754] __x64_sys_fallocate+0x75/0xc0 [ 1952.908743][T16754] do_syscall_64+0x3d/0x90 [ 1952.913157][T16754] ? irqentry_exit+0xe/0x30 [ 1952.917654][T16754] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1952.923540][T16754] RIP: 0033:0x4665f9 [ 1952.927426][T16754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.947016][T16754] RSP: 002b:00007f6fb4e01188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1952.955420][T16754] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 1952.963389][T16754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 06:12:06 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf070000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1952.971346][T16754] RBP: 00007f6fb4e011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.979466][T16754] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000001 [ 1952.987424][T16754] R13: 00007fff17f5ccef R14: 00007f6fb4e01300 R15: 0000000000022000 [ 1953.012246][T16742] loop5: detected capacity change from 0 to 544 [ 1953.013442][ C1] sd 0:0:1:0: tag#625 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1953.019749][ C0] sd 0:0:1:0: tag#622 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1953.028224][ C1] sd 0:0:1:0: tag#625 CDB: opcode=0xe5 (vendor) [ 1953.038116][ C0] sd 0:0:1:0: tag#622 CDB: opcode=0xe5 (vendor) [ 1953.044403][ C1] sd 0:0:1:0: tag#625 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1953.050627][ C0] sd 0:0:1:0: tag#622 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 06:12:06 executing program 2 (fault-call:11 fault-nth:9): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1953.059575][ C1] sd 0:0:1:0: tag#625 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1953.068615][ C0] sd 0:0:1:0: tag#622 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1953.068634][ C0] sd 0:0:1:0: tag#622 CDB[20]: 2d [ 1953.077547][ C1] sd 0:0:1:0: tag#625 CDB[20]: 2d 06:12:06 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xfffeffff00000000, 0x0, 0x40000006) [ 1953.116942][T16742] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:06 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff11, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1953.158301][T16780] loop4: detected capacity change from 0 to 224 [ 1953.165131][ C0] sd 0:0:1:0: tag#588 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1953.174886][ C0] sd 0:0:1:0: tag#588 CDB: opcode=0xe5 (vendor) [ 1953.181124][ C0] sd 0:0:1:0: tag#588 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1953.190080][ C0] sd 0:0:1:0: tag#588 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1953.199043][ C0] sd 0:0:1:0: tag#588 CDB[20]: 2d [ 1953.210223][T16774] FAULT_INJECTION: forcing a failure. [ 1953.210223][T16774] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.222897][T16774] CPU: 0 PID: 16774 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1953.232924][T16774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1953.242971][T16774] Call Trace: [ 1953.246238][T16774] dump_stack_lvl+0xb7/0x103 [ 1953.250924][T16774] dump_stack+0x11/0x1a [ 1953.255069][T16774] should_fail+0x23c/0x250 [ 1953.259487][T16774] ? ext4_mb_new_blocks+0x70f/0x1f90 [ 1953.264759][T16774] __should_failslab+0x81/0x90 [ 1953.269506][T16774] should_failslab+0x5/0x20 [ 1953.273992][T16774] kmem_cache_alloc+0x46/0x2e0 [ 1953.279705][T16774] ext4_mb_new_blocks+0x70f/0x1f90 [ 1953.284814][T16774] ? ext4_find_extent+0x7b2/0x7f0 [ 1953.289823][T16774] ? ext4_ext_search_right+0x2e3/0x540 [ 1953.295266][T16774] ext4_ext_map_blocks+0x1579/0x1f10 [ 1953.300535][T16774] ext4_map_blocks+0x70d/0xef0 [ 1953.305358][T16774] ? ext4_alloc_file_blocks+0x248/0x720 [ 1953.310891][T16774] ? __cond_resched+0x11/0x40 [ 1953.315575][T16774] ext4_alloc_file_blocks+0x271/0x720 [ 1953.320987][T16774] ext4_fallocate+0x2a7/0x4d0 [ 1953.325647][T16774] ? ext4_ext_truncate+0x170/0x170 [ 1953.330743][T16774] vfs_fallocate+0x459/0x6a0 [ 1953.335319][T16774] __x64_sys_fallocate+0x75/0xc0 [ 1953.340239][T16774] do_syscall_64+0x3d/0x90 [ 1953.344646][T16774] ? irqentry_exit+0xe/0x30 [ 1953.349264][T16774] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1953.355163][T16774] RIP: 0033:0x4665f9 [ 1953.359042][T16774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1953.378728][T16774] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1953.387211][T16774] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1953.395197][T16774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 06:12:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000040600000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1953.403772][T16774] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1953.411838][T16774] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1953.419792][T16774] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1953.434595][ C0] sd 0:0:1:0: tag#598 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1953.444360][ C0] sd 0:0:1:0: tag#598 CDB: opcode=0xe5 (vendor) [ 1953.450707][ C0] sd 0:0:1:0: tag#598 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 06:12:06 executing program 2 (fault-call:11 fault-nth:10): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:06 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xa00, 0x40000006) 06:12:06 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xffffffff00000000, 0x0, 0x40000006) [ 1953.459668][ C0] sd 0:0:1:0: tag#598 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1953.468641][ C0] sd 0:0:1:0: tag#598 CDB[20]: 2d 06:12:06 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf080000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1953.523661][ C1] sd 0:0:1:0: tag#617 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1953.533458][ C1] sd 0:0:1:0: tag#617 CDB: opcode=0xe5 (vendor) [ 1953.539708][ C1] sd 0:0:1:0: tag#617 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1953.548651][ C1] sd 0:0:1:0: tag#617 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1953.557586][ C1] sd 0:0:1:0: tag#617 CDB[20]: 2d [ 1953.595983][ C0] sd 0:0:1:0: tag#621 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1953.605759][ C0] sd 0:0:1:0: tag#621 CDB: opcode=0xe5 (vendor) [ 1953.606739][T16801] loop5: detected capacity change from 0 to 544 [ 1953.612021][ C0] sd 0:0:1:0: tag#621 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1953.627210][ C0] sd 0:0:1:0: tag#621 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1953.636164][ C0] sd 0:0:1:0: tag#621 CDB[20]: 2d [ 1953.637592][T16801] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1953.666513][T16794] FAULT_INJECTION: forcing a failure. [ 1953.666513][T16794] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.679276][T16794] CPU: 1 PID: 16794 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1953.689075][T16794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1953.699305][T16794] Call Trace: [ 1953.702601][T16794] dump_stack_lvl+0xb7/0x103 [ 1953.707202][T16794] dump_stack+0x11/0x1a [ 1953.711144][T16812] loop4: detected capacity change from 0 to 224 [ 1953.711445][T16794] should_fail+0x23c/0x250 [ 1953.722150][T16794] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1953.722184][T16794] __should_failslab+0x81/0x90 [ 1953.722202][T16794] should_failslab+0x5/0x20 [ 1953.736695][T16794] kmem_cache_alloc+0x46/0x2e0 [ 1953.741564][T16794] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1953.746714][T16794] ? ext4_find_extent+0x7b2/0x7f0 [ 1953.751727][T16794] ? ext4_ext_search_right+0x2e3/0x540 [ 1953.757171][T16794] ext4_ext_map_blocks+0x1579/0x1f10 [ 1953.762441][T16794] ext4_map_blocks+0x70d/0xef0 [ 1953.767300][T16794] ext4_alloc_file_blocks+0x271/0x720 [ 1953.772746][T16794] ext4_fallocate+0x2a7/0x4d0 [ 1953.777501][T16794] ? ext4_ext_truncate+0x170/0x170 [ 1953.782645][T16794] vfs_fallocate+0x459/0x6a0 [ 1953.787237][T16794] __x64_sys_fallocate+0x75/0xc0 [ 1953.792231][T16794] do_syscall_64+0x3d/0x90 [ 1953.796872][T16794] ? irqentry_exit+0xe/0x30 [ 1953.801400][T16794] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1953.807290][T16794] RIP: 0033:0x4665f9 [ 1953.811279][T16794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1953.830948][T16794] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1953.839528][T16794] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1953.847489][T16794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1953.855449][T16794] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 06:12:06 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff17, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1953.863404][T16794] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1953.871376][T16794] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:06 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf090000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:07 executing program 2 (fault-call:11 fault-nth:11): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xb00, 0x40000006) 06:12:07 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0xffffffff000213cb, 0x0, 0x40000006) [ 1953.910769][T16801] loop5: detected capacity change from 0 to 544 [ 1953.929502][T16801] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000700000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1953.966378][T16825] loop4: detected capacity change from 0 to 224 06:12:07 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0a0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:07 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2, 0x40000006) [ 1954.049317][T16839] FAULT_INJECTION: forcing a failure. [ 1954.049317][T16839] name failslab, interval 1, probability 0, space 0, times 0 [ 1954.052971][T16844] loop5: detected capacity change from 0 to 544 [ 1954.062101][T16839] CPU: 1 PID: 16839 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1954.077992][T16839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1954.088111][T16839] Call Trace: [ 1954.091410][T16839] dump_stack_lvl+0xb7/0x103 [ 1954.096053][T16839] dump_stack+0x11/0x1a [ 1954.100192][T16839] should_fail+0x23c/0x250 [ 1954.104623][T16839] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1954.109892][T16839] __should_failslab+0x81/0x90 [ 1954.114766][T16839] should_failslab+0x5/0x20 [ 1954.119263][T16839] kmem_cache_alloc+0x46/0x2e0 [ 1954.124006][T16839] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1954.129346][T16839] ? ext4_find_extent+0x7b2/0x7f0 [ 1954.134365][T16839] ? ext4_ext_search_right+0x2e3/0x540 [ 1954.139911][T16839] ext4_ext_map_blocks+0x1579/0x1f10 [ 1954.145244][T16839] ext4_map_blocks+0x70d/0xef0 [ 1954.150004][T16839] ? ext4_alloc_file_blocks+0x248/0x720 [ 1954.155532][T16839] ? __cond_resched+0x11/0x40 [ 1954.160460][T16839] ext4_alloc_file_blocks+0x271/0x720 [ 1954.165816][T16839] ext4_fallocate+0x2a7/0x4d0 [ 1954.170551][T16839] ? ext4_ext_truncate+0x170/0x170 [ 1954.175646][T16839] vfs_fallocate+0x459/0x6a0 [ 1954.180221][T16839] __x64_sys_fallocate+0x75/0xc0 [ 1954.185153][T16839] do_syscall_64+0x3d/0x90 [ 1954.189558][T16839] ? irqentry_exit+0xe/0x30 [ 1954.194054][T16839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1954.200037][T16839] RIP: 0033:0x4665f9 [ 1954.203954][T16839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1954.223600][T16839] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1954.231997][T16839] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1954.239952][T16839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1954.247904][T16839] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1954.255880][T16839] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1954.263835][T16839] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1954.282329][T16844] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1954.293069][T16845] loop4: detected capacity change from 0 to 224 06:12:07 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x3, 0x40000006) 06:12:07 executing program 2 (fault-call:11 fault-nth:12): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:07 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0b0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000900000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1954.377527][T16844] loop5: detected capacity change from 0 to 544 [ 1954.385677][T16844] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1954.428352][T16863] FAULT_INJECTION: forcing a failure. [ 1954.428352][T16863] name failslab, interval 1, probability 0, space 0, times 0 [ 1954.441207][T16863] CPU: 0 PID: 16863 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1954.451002][T16863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1954.461054][T16863] Call Trace: [ 1954.464325][T16863] dump_stack_lvl+0xb7/0x103 [ 1954.468957][T16863] dump_stack+0x11/0x1a [ 1954.473102][T16863] should_fail+0x23c/0x250 [ 1954.477584][T16863] ? __es_insert_extent+0x51f/0xe70 [ 1954.482773][T16863] __should_failslab+0x81/0x90 [ 1954.487530][T16863] should_failslab+0x5/0x20 [ 1954.492044][T16863] kmem_cache_alloc+0x46/0x2e0 [ 1954.496805][T16863] __es_insert_extent+0x51f/0xe70 [ 1954.501872][T16863] ext4_es_insert_extent+0x1bb/0x19d0 [ 1954.507237][T16863] ? ext4_map_blocks+0x9d2/0xef0 [ 1954.512190][T16863] ext4_map_blocks+0xa4c/0xef0 [ 1954.517030][T16863] ? ext4_alloc_file_blocks+0x248/0x720 [ 1954.522665][T16863] ? __cond_resched+0x11/0x40 [ 1954.527336][T16863] ext4_alloc_file_blocks+0x271/0x720 [ 1954.532705][T16863] ext4_fallocate+0x2a7/0x4d0 [ 1954.537375][T16863] ? ext4_ext_truncate+0x170/0x170 [ 1954.542570][T16863] vfs_fallocate+0x459/0x6a0 [ 1954.547249][T16863] __x64_sys_fallocate+0x75/0xc0 [ 1954.552188][T16863] do_syscall_64+0x3d/0x90 [ 1954.556613][T16863] ? irqentry_exit+0xe/0x30 [ 1954.561128][T16863] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1954.567043][T16863] RIP: 0033:0x4665f9 [ 1954.570959][T16863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1954.579572][T16873] loop4: detected capacity change from 0 to 224 [ 1954.590553][T16863] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1954.590575][T16863] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1954.590589][T16863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1954.621109][T16863] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 06:12:07 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff19, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xc00, 0x40000006) [ 1954.629076][T16863] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1954.637062][T16863] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1954.658436][T16879] loop5: detected capacity change from 0 to 544 06:12:07 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0c0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:07 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x4, 0x40000006) [ 1954.674594][T16879] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:07 executing program 2 (fault-call:11 fault-nth:13): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:07 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0d0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1954.789146][T16879] loop5: detected capacity change from 0 to 544 [ 1954.800695][T16901] loop4: detected capacity change from 0 to 224 [ 1954.808166][T16879] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1954.873722][T16908] FAULT_INJECTION: forcing a failure. [ 1954.873722][T16908] name failslab, interval 1, probability 0, space 0, times 0 [ 1954.886527][T16908] CPU: 1 PID: 16908 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1954.896365][T16908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1954.906405][T16908] Call Trace: [ 1954.909676][T16908] dump_stack_lvl+0xb7/0x103 [ 1954.914267][T16908] dump_stack+0x11/0x1a [ 1954.918420][T16908] should_fail+0x23c/0x250 06:12:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xd00, 0x40000006) 06:12:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000a00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1954.922865][T16908] ? kcalloc+0x32/0x50 [ 1954.926962][T16908] __should_failslab+0x81/0x90 [ 1954.931778][T16908] should_failslab+0x5/0x20 [ 1954.936281][T16908] __kmalloc+0x66/0x340 [ 1954.940714][T16908] ? chksum_update+0x39/0x50 [ 1954.945318][T16908] kcalloc+0x32/0x50 [ 1954.949245][T16908] ext4_find_extent+0x21c/0x7f0 [ 1954.954144][T16908] ext4_ext_map_blocks+0xd9/0x1f10 [ 1954.959252][T16908] ? __ext4_handle_dirty_metadata+0x20c/0x590 [ 1954.965294][T16908] ? __ext4_update_other_inode_time+0x1b1/0x5c0 [ 1954.971604][T16908] ? __down_write_common+0x42/0x810 [ 1954.976918][T16908] ? percpu_counter_add_batch+0x69/0xd0 [ 1954.982533][T16908] ? ext4_es_lookup_extent+0x36b/0x490 [ 1954.987969][T16908] ext4_map_blocks+0x70d/0xef0 [ 1954.992799][T16908] ? ext4_alloc_file_blocks+0x248/0x720 [ 1954.998328][T16908] ? __cond_resched+0x11/0x40 [ 1955.002987][T16908] ext4_alloc_file_blocks+0x271/0x720 [ 1955.008361][T16908] ext4_fallocate+0x2a7/0x4d0 [ 1955.013025][T16908] ? ext4_ext_truncate+0x170/0x170 [ 1955.018227][T16908] vfs_fallocate+0x459/0x6a0 [ 1955.022805][T16908] __x64_sys_fallocate+0x75/0xc0 [ 1955.027717][T16908] do_syscall_64+0x3d/0x90 [ 1955.032131][T16908] ? irqentry_exit+0xe/0x30 [ 1955.036642][T16908] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1955.042643][T16908] RIP: 0033:0x4665f9 [ 1955.046512][T16908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1955.066105][T16908] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d 06:12:08 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x5, 0x40000006) [ 1955.074555][T16908] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1955.082507][T16908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1955.090476][T16908] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1955.098571][T16908] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1955.106528][T16908] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:08 executing program 2 (fault-call:11 fault-nth:14): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:08 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0e0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1955.153188][T16924] loop5: detected capacity change from 0 to 544 [ 1955.159963][T16925] loop4: detected capacity change from 0 to 224 [ 1955.183909][T16924] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000b00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1955.287176][T16936] FAULT_INJECTION: forcing a failure. [ 1955.287176][T16936] name failslab, interval 1, probability 0, space 0, times 0 [ 1955.289468][T16944] loop4: detected capacity change from 0 to 224 [ 1955.300131][T16936] CPU: 0 PID: 16936 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1955.316089][T16936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1955.326235][T16936] Call Trace: [ 1955.329513][T16936] dump_stack_lvl+0xb7/0x103 [ 1955.334173][T16936] dump_stack+0x11/0x1a [ 1955.338335][T16936] should_fail+0x23c/0x250 [ 1955.342775][T16936] ? __es_insert_extent+0x51f/0xe70 [ 1955.347971][T16936] __should_failslab+0x81/0x90 [ 1955.352835][T16936] should_failslab+0x5/0x20 [ 1955.357346][T16936] kmem_cache_alloc+0x46/0x2e0 [ 1955.362106][T16936] __es_insert_extent+0x51f/0xe70 [ 1955.367119][T16936] ext4_es_insert_extent+0x1bb/0x19d0 [ 1955.372532][T16936] ext4_map_blocks+0xa4c/0xef0 [ 1955.377292][T16936] ? ext4_alloc_file_blocks+0x248/0x720 [ 1955.382831][T16936] ? __cond_resched+0x11/0x40 [ 1955.387523][T16936] ext4_alloc_file_blocks+0x271/0x720 [ 1955.392890][T16936] ext4_fallocate+0x2a7/0x4d0 [ 1955.397581][T16936] ? ext4_ext_truncate+0x170/0x170 [ 1955.402679][T16936] vfs_fallocate+0x459/0x6a0 [ 1955.407255][T16936] __x64_sys_fallocate+0x75/0xc0 [ 1955.412329][T16936] do_syscall_64+0x3d/0x90 [ 1955.416737][T16936] ? irqentry_exit+0xe/0x30 [ 1955.421232][T16936] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1955.427206][T16936] RIP: 0033:0x4665f9 [ 1955.431105][T16936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1955.450699][T16936] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1955.459093][T16936] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1955.467051][T16936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1955.475007][T16936] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 06:12:08 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff23, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:08 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0f0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1955.482961][T16936] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1955.491009][T16936] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1955.508789][T16945] loop5: detected capacity change from 0 to 544 06:12:08 executing program 2 (fault-call:11 fault-nth:15): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:08 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf100000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1955.585163][T16945] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1955.624675][T16960] loop4: detected capacity change from 0 to 224 06:12:08 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xe00, 0x40000006) [ 1955.679292][T16945] loop5: detected capacity change from 0 to 544 [ 1955.705402][T16964] FAULT_INJECTION: forcing a failure. [ 1955.705402][T16964] name failslab, interval 1, probability 0, space 0, times 0 [ 1955.718235][T16964] CPU: 0 PID: 16964 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1955.728039][T16964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1955.728757][T16945] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1955.738093][T16964] Call Trace: [ 1955.738102][T16964] dump_stack_lvl+0xb7/0x103 [ 1955.738125][T16964] dump_stack+0x11/0x1a [ 1955.738144][T16964] should_fail+0x23c/0x250 [ 1955.764365][T16964] ? ext4_mb_new_blocks+0x70f/0x1f90 [ 1955.769680][T16964] __should_failslab+0x81/0x90 [ 1955.774788][T16964] should_failslab+0x5/0x20 [ 1955.779384][T16964] kmem_cache_alloc+0x46/0x2e0 [ 1955.784170][T16964] ext4_mb_new_blocks+0x70f/0x1f90 [ 1955.789288][T16964] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1955.795095][T16964] ? ext4_ext_search_right+0x2e3/0x540 [ 1955.800603][T16964] ext4_ext_map_blocks+0x1579/0x1f10 [ 1955.805919][T16964] ext4_map_blocks+0x70d/0xef0 [ 1955.808359][T16979] loop4: detected capacity change from 0 to 224 [ 1955.810741][T16964] ? ext4_alloc_file_blocks+0x248/0x720 [ 1955.810766][T16964] ? __cond_resched+0x11/0x40 [ 1955.827321][T16964] ext4_alloc_file_blocks+0x271/0x720 [ 1955.832754][T16964] ext4_fallocate+0x2a7/0x4d0 [ 1955.832775][T16964] ? ext4_ext_truncate+0x170/0x170 [ 1955.842523][T16964] vfs_fallocate+0x459/0x6a0 [ 1955.842547][T16964] __x64_sys_fallocate+0x75/0xc0 [ 1955.852197][T16964] do_syscall_64+0x3d/0x90 [ 1955.856616][T16964] ? irqentry_exit+0xe/0x30 [ 1955.861290][T16964] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1955.867195][T16964] RIP: 0033:0x4665f9 06:12:08 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff2f, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:08 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xf00, 0x40000006) 06:12:08 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf110000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:08 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x6, 0x40000006) [ 1955.871087][T16964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1955.890688][T16964] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1955.899179][T16964] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1955.907147][T16964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1955.915201][T16964] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 06:12:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000c00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1955.923185][T16964] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1955.931154][T16964] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:09 executing program 2 (fault-call:11 fault-nth:16): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:09 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf120000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1956.002093][T17004] loop4: detected capacity change from 0 to 224 [ 1956.039873][T17007] loop5: detected capacity change from 0 to 544 06:12:09 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff33, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1956.072314][T17007] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1956.095254][T17020] loop4: detected capacity change from 0 to 224 [ 1956.107611][T17017] FAULT_INJECTION: forcing a failure. [ 1956.107611][T17017] name failslab, interval 1, probability 0, space 0, times 0 [ 1956.120342][T17017] CPU: 1 PID: 17017 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1956.130171][T17017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1956.140245][T17017] Call Trace: [ 1956.143520][T17017] dump_stack_lvl+0xb7/0x103 [ 1956.148121][T17017] dump_stack+0x11/0x1a [ 1956.152312][T17017] should_fail+0x23c/0x250 [ 1956.156801][T17017] ? ext4_mb_new_blocks+0x70f/0x1f90 [ 1956.162129][T17017] __should_failslab+0x81/0x90 [ 1956.166890][T17017] should_failslab+0x5/0x20 [ 1956.171386][T17017] kmem_cache_alloc+0x46/0x2e0 [ 1956.176151][T17017] ext4_mb_new_blocks+0x70f/0x1f90 [ 1956.181257][T17017] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1956.187062][T17017] ? ext4_ext_search_right+0x2e3/0x540 [ 1956.192531][T17017] ext4_ext_map_blocks+0x1579/0x1f10 [ 1956.197888][T17017] ext4_map_blocks+0x70d/0xef0 [ 1956.202642][T17017] ? ext4_alloc_file_blocks+0x248/0x720 [ 1956.208174][T17017] ? __cond_resched+0x11/0x40 [ 1956.212835][T17017] ext4_alloc_file_blocks+0x271/0x720 [ 1956.218239][T17017] ext4_fallocate+0x2a7/0x4d0 [ 1956.222901][T17017] ? ext4_ext_truncate+0x170/0x170 [ 1956.228034][T17017] vfs_fallocate+0x459/0x6a0 [ 1956.232713][T17017] __x64_sys_fallocate+0x75/0xc0 [ 1956.237632][T17017] do_syscall_64+0x3d/0x90 [ 1956.242069][T17017] ? irqentry_exit+0xe/0x30 [ 1956.246558][T17017] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1956.252444][T17017] RIP: 0033:0x4665f9 [ 1956.256322][T17017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1956.276212][T17017] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1956.284612][T17017] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1956.292571][T17017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1956.300534][T17017] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1956.308491][T17017] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 06:12:09 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x1100, 0x40000006) 06:12:09 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf180000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1956.316445][T17017] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:09 executing program 2 (fault-call:11 fault-nth:17): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1956.348146][T17007] loop5: detected capacity change from 0 to 544 [ 1956.357969][T17007] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000d00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1956.391252][T17036] FAULT_INJECTION: forcing a failure. [ 1956.391252][T17036] name failslab, interval 1, probability 0, space 0, times 0 [ 1956.403999][T17036] CPU: 0 PID: 17036 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1956.413834][T17036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1956.423993][T17036] Call Trace: [ 1956.427267][T17036] dump_stack_lvl+0xb7/0x103 [ 1956.431900][T17036] dump_stack+0x11/0x1a [ 1956.436049][T17036] should_fail+0x23c/0x250 06:12:09 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7, 0x40000006) [ 1956.440667][T17036] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1956.445941][T17036] __should_failslab+0x81/0x90 [ 1956.450726][T17036] should_failslab+0x5/0x20 [ 1956.455248][T17036] kmem_cache_alloc+0x46/0x2e0 [ 1956.460139][T17036] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1956.465332][T17036] ? ext4_find_extent+0x7b2/0x7f0 [ 1956.470382][T17036] ? ext4_ext_search_right+0x2e3/0x540 [ 1956.475843][T17036] ext4_ext_map_blocks+0x1579/0x1f10 [ 1956.481178][T17036] ext4_map_blocks+0x70d/0xef0 [ 1956.485932][T17036] ? ext4_alloc_file_blocks+0x248/0x720 [ 1956.491458][T17036] ? __cond_resched+0x11/0x40 [ 1956.496121][T17036] ext4_alloc_file_blocks+0x271/0x720 [ 1956.501543][T17036] ext4_fallocate+0x2a7/0x4d0 [ 1956.506220][T17036] ? ext4_ext_truncate+0x170/0x170 [ 1956.511374][T17036] vfs_fallocate+0x459/0x6a0 [ 1956.515949][T17036] __x64_sys_fallocate+0x75/0xc0 [ 1956.520937][T17036] do_syscall_64+0x3d/0x90 [ 1956.525341][T17036] ? irqentry_exit+0xe/0x30 [ 1956.529912][T17036] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1956.535796][T17036] RIP: 0033:0x4665f9 [ 1956.539671][T17036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1956.559259][T17036] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1956.567661][T17036] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1956.575616][T17036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1956.583726][T17036] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1956.591781][T17036] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1956.599776][T17036] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1956.628634][T17046] loop4: detected capacity change from 0 to 224 [ 1956.633092][T17048] loop5: detected capacity change from 0 to 544 06:12:09 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff47, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:09 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x1200, 0x40000006) [ 1956.647467][T17048] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:09 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf190000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000e00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1956.702529][T17048] loop5: detected capacity change from 0 to 544 [ 1956.712944][T17048] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:09 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf220000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1956.782409][T17069] loop4: detected capacity change from 0 to 224 [ 1956.799872][T17071] loop5: detected capacity change from 0 to 544 06:12:09 executing program 2 (fault-call:11 fault-nth:18): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:09 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff5f, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1956.838564][T17071] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1956.888315][T17071] loop5: detected capacity change from 0 to 544 [ 1956.897823][T17078] FAULT_INJECTION: forcing a failure. [ 1956.897823][T17078] name failslab, interval 1, probability 0, space 0, times 0 [ 1956.910575][T17078] CPU: 0 PID: 17078 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1956.910606][T17071] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1956.920638][T17078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1956.920682][T17078] Call Trace: [ 1956.920689][T17078] dump_stack_lvl+0xb7/0x103 [ 1956.920715][T17078] dump_stack+0x11/0x1a [ 1956.920731][T17078] should_fail+0x23c/0x250 [ 1956.931626][T17088] loop4: detected capacity change from 0 to 224 [ 1956.940824][T17078] ? kcalloc+0x32/0x50 [ 1956.940845][T17078] __should_failslab+0x81/0x90 [ 1956.972363][T17078] should_failslab+0x5/0x20 [ 1956.976912][T17078] __kmalloc+0x66/0x340 [ 1956.981075][T17078] ? chksum_update+0x39/0x50 [ 1956.985658][T17078] kcalloc+0x32/0x50 [ 1956.989596][T17078] ext4_find_extent+0x21c/0x7f0 [ 1956.994430][T17078] ext4_ext_map_blocks+0xd9/0x1f10 [ 1956.999600][T17078] ? __ext4_handle_dirty_metadata+0x20c/0x590 [ 1957.005650][T17078] ? __ext4_update_other_inode_time+0x1b1/0x5c0 [ 1957.011884][T17078] ? __down_write_common+0x42/0x810 [ 1957.017080][T17078] ? percpu_counter_add_batch+0x69/0xd0 [ 1957.022704][T17078] ? ext4_es_lookup_extent+0x36b/0x490 [ 1957.028167][T17078] ext4_map_blocks+0x70d/0xef0 [ 1957.032935][T17078] ? ext4_alloc_file_blocks+0x248/0x720 [ 1957.038553][T17078] ? __cond_resched+0x11/0x40 [ 1957.043218][T17078] ext4_alloc_file_blocks+0x271/0x720 [ 1957.048577][T17078] ext4_fallocate+0x2a7/0x4d0 [ 1957.053256][T17078] ? ext4_ext_truncate+0x170/0x170 [ 1957.058361][T17078] vfs_fallocate+0x459/0x6a0 [ 1957.062990][T17078] __x64_sys_fallocate+0x75/0xc0 [ 1957.067912][T17078] do_syscall_64+0x3d/0x90 [ 1957.072379][T17078] ? irqentry_exit+0xe/0x30 [ 1957.076864][T17078] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1957.082828][T17078] RIP: 0033:0x4665f9 [ 1957.086702][T17078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1957.106296][T17078] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1957.114698][T17078] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1957.122733][T17078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1957.130698][T17078] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1957.138654][T17078] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1957.146683][T17078] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:10 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf250000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000f00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:10 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff67, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1957.251582][T17102] loop4: detected capacity change from 0 to 224 06:12:10 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf480000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1957.322247][T17113] loop5: detected capacity change from 0 to 544 [ 1957.360391][T17113] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:10 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x8, 0x40000006) 06:12:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x1800, 0x40000006) 06:12:10 executing program 2 (fault-call:11 fault-nth:19): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1957.386277][T17122] loop4: detected capacity change from 0 to 224 06:12:10 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf4c0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1957.439289][T17113] loop5: detected capacity change from 0 to 544 [ 1957.451839][T17113] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1957.491048][T17138] FAULT_INJECTION: forcing a failure. [ 1957.491048][T17138] name failslab, interval 1, probability 0, space 0, times 0 [ 1957.503762][T17138] CPU: 1 PID: 17138 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1957.513594][T17138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1957.523647][T17138] Call Trace: [ 1957.527015][T17138] dump_stack_lvl+0xb7/0x103 [ 1957.531606][T17138] dump_stack+0x11/0x1a [ 1957.535760][T17138] should_fail+0x23c/0x250 [ 1957.540525][T17138] ? kcalloc+0x32/0x50 [ 1957.544700][T17138] __should_failslab+0x81/0x90 [ 1957.549470][T17138] should_failslab+0x5/0x20 [ 1957.553971][T17138] __kmalloc+0x66/0x340 [ 1957.558126][T17138] ? chksum_update+0x39/0x50 [ 1957.562711][T17138] kcalloc+0x32/0x50 [ 1957.566595][T17138] ext4_find_extent+0x21c/0x7f0 [ 1957.571451][T17138] ext4_ext_map_blocks+0xd9/0x1f10 [ 1957.576618][T17138] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1957.582773][T17138] ? __down_write_common+0x42/0x810 06:12:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000, 0x40000006) 06:12:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000020f00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1957.588010][T17138] ? percpu_counter_add_batch+0x69/0xd0 [ 1957.593557][T17138] ? ext4_es_lookup_extent+0x36b/0x490 [ 1957.599104][T17138] ext4_map_blocks+0x70d/0xef0 [ 1957.603870][T17138] ? ext4_alloc_file_blocks+0x248/0x720 [ 1957.609493][T17138] ? __cond_resched+0x11/0x40 [ 1957.610257][ C0] scsi_io_completion_action: 38 callbacks suppressed [ 1957.610286][ C0] sd 0:0:1:0: tag#594 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1957.614160][T17138] ext4_alloc_file_blocks+0x271/0x720 [ 1957.614193][T17138] ext4_fallocate+0x2a7/0x4d0 [ 1957.620870][ C0] sd 0:0:1:0: tag#594 CDB: opcode=0xe5 (vendor) [ 1957.630598][T17138] ? ext4_ext_truncate+0x170/0x170 [ 1957.630621][T17138] vfs_fallocate+0x459/0x6a0 [ 1957.636011][ C0] sd 0:0:1:0: tag#594 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1957.640638][T17138] __x64_sys_fallocate+0x75/0xc0 [ 1957.646867][ C0] sd 0:0:1:0: tag#594 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1957.651926][T17138] do_syscall_64+0x3d/0x90 [ 1957.656502][ C0] sd 0:0:1:0: tag#594 CDB[20]: 2d [ 1957.665381][T17138] ? irqentry_exit+0xe/0x30 [ 1957.665401][T17138] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1957.699047][T17138] RIP: 0033:0x4665f9 [ 1957.702936][T17138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1957.722649][T17138] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1957.731060][T17138] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 06:12:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x3f00, 0x40000006) [ 1957.739116][T17138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1957.747093][T17138] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1957.755134][T17138] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1957.763145][T17138] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1957.773960][ C0] sd 0:0:1:0: tag#598 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1957.783444][T17155] loop4: detected capacity change from 0 to 224 06:12:10 executing program 2 (fault-call:11 fault-nth:20): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1957.783720][ C0] sd 0:0:1:0: tag#598 CDB: opcode=0xe5 (vendor) [ 1957.796150][ C0] sd 0:0:1:0: tag#598 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1957.805116][ C0] sd 0:0:1:0: tag#598 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1957.814065][ C0] sd 0:0:1:0: tag#598 CDB[20]: 2d [ 1957.821814][ C1] sd 0:0:1:0: tag#605 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1957.831595][ C1] sd 0:0:1:0: tag#605 CDB: opcode=0xe5 (vendor) 06:12:10 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x9, 0x40000006) [ 1957.837862][ C1] sd 0:0:1:0: tag#605 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1957.844201][T17163] loop5: detected capacity change from 0 to 544 [ 1957.846815][ C1] sd 0:0:1:0: tag#605 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1957.861972][ C1] sd 0:0:1:0: tag#605 CDB[20]: 2d [ 1957.867296][T17163] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1957.921462][ C0] sd 0:0:1:0: tag#637 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1957.922186][ C1] sd 0:0:1:0: tag#577 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1957.931337][ C0] sd 0:0:1:0: tag#637 CDB: opcode=0xe5 (vendor) [ 1957.941063][ C1] sd 0:0:1:0: tag#577 CDB: opcode=0xe5 (vendor) [ 1957.947317][ C0] sd 0:0:1:0: tag#637 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1957.953546][ C1] sd 0:0:1:0: tag#577 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1957.962461][ C0] sd 0:0:1:0: tag#637 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1957.971362][ C1] sd 0:0:1:0: tag#577 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1957.980370][ C0] sd 0:0:1:0: tag#637 CDB[20]: 2d [ 1957.987941][T17166] FAULT_INJECTION: forcing a failure. [ 1957.987941][T17166] name failslab, interval 1, probability 0, space 0, times 0 [ 1957.989332][ C1] sd 0:0:1:0: tag#577 CDB[20]: 2d [ 1957.994386][T17166] CPU: 0 PID: 17166 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1958.022000][T17166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1958.032043][T17166] Call Trace: [ 1958.035305][T17166] dump_stack_lvl+0xb7/0x103 [ 1958.039884][T17166] dump_stack+0x11/0x1a [ 1958.044022][T17166] should_fail+0x23c/0x250 [ 1958.048428][T17166] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1958.053701][T17166] __should_failslab+0x81/0x90 [ 1958.058781][T17166] should_failslab+0x5/0x20 [ 1958.063350][T17166] kmem_cache_alloc+0x46/0x2e0 [ 1958.068107][T17166] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1958.073392][T17166] ? ext4_ext_search_right+0x2e3/0x540 [ 1958.078844][T17166] ? __sanitizer_cov_trace_pc+0x38/0x60 [ 1958.084379][T17166] ? ext4_ext_search_right+0x2e3/0x540 [ 1958.089958][T17166] ext4_ext_map_blocks+0x1579/0x1f10 [ 1958.095321][T17166] ext4_map_blocks+0x70d/0xef0 [ 1958.100093][T17166] ? ext4_alloc_file_blocks+0x248/0x720 [ 1958.105625][T17166] ? __cond_resched+0x11/0x40 [ 1958.110316][T17166] ext4_alloc_file_blocks+0x271/0x720 [ 1958.115674][T17166] ext4_fallocate+0x2a7/0x4d0 [ 1958.120466][T17166] ? ext4_ext_truncate+0x170/0x170 [ 1958.125575][T17166] vfs_fallocate+0x459/0x6a0 [ 1958.130337][T17166] __x64_sys_fallocate+0x75/0xc0 [ 1958.135292][T17166] do_syscall_64+0x3d/0x90 [ 1958.139699][T17166] ? irqentry_exit+0xe/0x30 [ 1958.144216][T17166] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1958.150139][T17166] RIP: 0033:0x4665f9 06:12:11 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf680000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1958.154025][T17166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.173618][T17166] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1958.182185][T17166] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1958.190209][T17166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1958.198178][T17166] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.206148][T17166] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1958.214101][T17166] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:11 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffe, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:11 executing program 2 (fault-call:11 fault-nth:21): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1958.300268][T17163] loop5: detected capacity change from 0 to 544 [ 1958.334642][T17163] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1958.336980][T17180] loop4: detected capacity change from 0 to 224 [ 1958.346070][ C0] sd 0:0:1:0: tag#588 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1958.360593][ C0] sd 0:0:1:0: tag#588 CDB: opcode=0xe5 (vendor) [ 1958.366869][ C0] sd 0:0:1:0: tag#588 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1958.375839][ C0] sd 0:0:1:0: tag#588 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1958.384795][ C0] sd 0:0:1:0: tag#588 CDB[20]: 2d 06:12:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000011000000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:11 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xa, 0x40000006) [ 1958.397205][ C1] sd 0:0:1:0: tag#602 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1958.406979][ C1] sd 0:0:1:0: tag#602 CDB: opcode=0xe5 (vendor) [ 1958.413337][ C1] sd 0:0:1:0: tag#602 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1958.422294][ C1] sd 0:0:1:0: tag#602 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1958.431274][ C1] sd 0:0:1:0: tag#602 CDB[20]: 2d [ 1958.465298][T17184] FAULT_INJECTION: forcing a failure. [ 1958.465298][T17184] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.478012][T17184] CPU: 1 PID: 17184 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1958.487823][T17184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1958.497937][T17184] Call Trace: [ 1958.501200][T17184] dump_stack_lvl+0xb7/0x103 [ 1958.505776][T17184] dump_stack+0x11/0x1a [ 1958.509970][T17184] should_fail+0x23c/0x250 [ 1958.514388][T17184] ? ext4_mb_new_blocks+0x70f/0x1f90 [ 1958.519709][T17184] __should_failslab+0x81/0x90 [ 1958.524454][T17184] should_failslab+0x5/0x20 [ 1958.528961][T17184] kmem_cache_alloc+0x46/0x2e0 [ 1958.533703][T17184] ext4_mb_new_blocks+0x70f/0x1f90 [ 1958.538857][T17184] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1958.543226][ C0] sd 0:0:1:0: tag#615 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1958.544643][T17184] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1958.554403][ C0] sd 0:0:1:0: tag#615 CDB: opcode=0xe5 (vendor) [ 1958.560506][T17184] ext4_new_meta_blocks+0x84/0x180 [ 1958.566764][ C0] sd 0:0:1:0: tag#615 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1958.571813][T17184] ext4_ext_insert_extent+0xa20/0x2d90 [ 1958.580747][ C0] sd 0:0:1:0: tag#615 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1958.586238][T17184] ? ext4_ext_search_right+0x2e3/0x540 [ 1958.595178][ C0] sd 0:0:1:0: tag#615 CDB[20]: 2d [ 1958.600600][T17184] ext4_ext_map_blocks+0x168d/0x1f10 [ 1958.610871][T17184] ext4_map_blocks+0x70d/0xef0 [ 1958.615742][T17184] ? ext4_alloc_file_blocks+0x248/0x720 [ 1958.621276][T17184] ? __cond_resched+0x11/0x40 [ 1958.625963][T17184] ext4_alloc_file_blocks+0x271/0x720 [ 1958.631322][T17184] ext4_fallocate+0x2a7/0x4d0 [ 1958.635999][T17184] ? ext4_ext_truncate+0x170/0x170 [ 1958.641090][T17184] vfs_fallocate+0x459/0x6a0 [ 1958.645672][T17184] __x64_sys_fallocate+0x75/0xc0 [ 1958.650587][T17184] do_syscall_64+0x3d/0x90 [ 1958.655021][T17184] ? irqentry_exit+0xe/0x30 [ 1958.659503][T17184] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1958.665380][T17184] RIP: 0033:0x4665f9 [ 1958.669252][T17184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.676145][ C0] sd 0:0:1:0: tag#616 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1958.689275][T17184] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1958.689321][T17184] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1958.699076][ C0] sd 0:0:1:0: tag#616 CDB: opcode=0xe5 (vendor) [ 1958.707427][T17184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1958.707444][T17184] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.715628][ C0] sd 0:0:1:0: tag#616 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1958.721804][T17184] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1958.729904][ C0] sd 0:0:1:0: tag#616 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 06:12:11 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf6c0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:11 executing program 2 (fault-call:11 fault-nth:22): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:11 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x6000, 0x40000006) [ 1958.737825][T17184] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1958.747216][ C0] sd 0:0:1:0: tag#616 CDB[20]: 2d [ 1958.817718][ C1] sd 0:0:1:0: tag#633 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1958.829647][ C1] sd 0:0:1:0: tag#633 CDB: opcode=0xe5 (vendor) [ 1958.835910][ C1] sd 0:0:1:0: tag#633 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1958.844948][ C1] sd 0:0:1:0: tag#633 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1958.853909][ C1] sd 0:0:1:0: tag#633 CDB[20]: 2d [ 1958.933530][T17213] loop4: detected capacity change from 0 to 224 [ 1958.942894][T17203] FAULT_INJECTION: forcing a failure. [ 1958.942894][T17203] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.956178][T17203] CPU: 0 PID: 17203 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1958.965995][T17203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1958.976243][T17203] Call Trace: [ 1958.976253][T17203] dump_stack_lvl+0xb7/0x103 [ 1958.976278][T17203] dump_stack+0x11/0x1a [ 1958.988411][T17203] should_fail+0x23c/0x250 [ 1958.992831][T17203] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1958.998111][T17203] __should_failslab+0x81/0x90 [ 1959.002876][T17203] should_failslab+0x5/0x20 [ 1959.007375][T17203] kmem_cache_alloc+0x46/0x2e0 [ 1959.012139][T17203] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1959.017246][T17203] ? ext4_ext_search_right+0x2e3/0x540 [ 1959.022783][T17203] ? __sanitizer_cov_trace_pc+0x56/0x60 [ 1959.028330][T17203] ? ext4_ext_search_right+0x2e3/0x540 06:12:12 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf740000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:12 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x6800, 0x40000006) 06:12:12 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x11e01, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1959.033877][T17203] ext4_ext_map_blocks+0x1579/0x1f10 [ 1959.039364][T17203] ext4_map_blocks+0x70d/0xef0 [ 1959.044118][T17203] ? ext4_alloc_file_blocks+0x248/0x720 [ 1959.049655][T17203] ? __cond_resched+0x11/0x40 [ 1959.054544][T17203] ext4_alloc_file_blocks+0x271/0x720 [ 1959.060004][T17203] ext4_fallocate+0x2a7/0x4d0 [ 1959.064769][T17203] ? ext4_ext_truncate+0x170/0x170 [ 1959.069880][T17203] vfs_fallocate+0x459/0x6a0 [ 1959.074576][T17203] __x64_sys_fallocate+0x75/0xc0 [ 1959.079520][T17203] do_syscall_64+0x3d/0x90 [ 1959.083939][T17203] ? irqentry_exit+0xe/0x30 [ 1959.088439][T17203] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1959.094375][T17203] RIP: 0033:0x4665f9 [ 1959.098347][T17203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1959.109598][T17223] loop5: detected capacity change from 0 to 544 [ 1959.118049][T17203] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d 06:12:12 executing program 2 (fault-call:11 fault-nth:23): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:12 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xb, 0x40000006) [ 1959.118075][T17203] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1959.118088][T17203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1959.127445][T17223] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1959.132705][T17203] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1959.132721][T17203] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1959.132732][T17203] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1959.248972][T17238] loop4: detected capacity change from 0 to 224 [ 1959.254893][T17237] FAULT_INJECTION: forcing a failure. [ 1959.254893][T17237] name failslab, interval 1, probability 0, space 0, times 0 [ 1959.268598][T17237] CPU: 1 PID: 17237 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1959.278397][T17237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1959.288992][T17237] Call Trace: [ 1959.292270][T17237] dump_stack_lvl+0xb7/0x103 [ 1959.296853][T17237] dump_stack+0x11/0x1a [ 1959.301079][T17237] should_fail+0x23c/0x250 [ 1959.305546][T17237] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1959.310835][T17237] __should_failslab+0x81/0x90 [ 1959.315605][T17237] should_failslab+0x5/0x20 [ 1959.320329][T17237] kmem_cache_alloc+0x46/0x2e0 [ 1959.325162][T17237] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1959.330264][T17237] ? ext4_find_extent+0x7b2/0x7f0 [ 1959.335268][T17237] ? ext4_ext_search_right+0x2e3/0x540 [ 1959.340798][T17237] ext4_ext_map_blocks+0x1579/0x1f10 [ 1959.346155][T17237] ext4_map_blocks+0x70d/0xef0 [ 1959.350905][T17237] ? ext4_alloc_file_blocks+0x248/0x720 [ 1959.356435][T17237] ? __cond_resched+0x11/0x40 [ 1959.361096][T17237] ext4_alloc_file_blocks+0x271/0x720 [ 1959.366653][T17237] ext4_fallocate+0x2a7/0x4d0 [ 1959.371389][T17237] ? ext4_ext_truncate+0x170/0x170 [ 1959.376484][T17237] vfs_fallocate+0x459/0x6a0 [ 1959.381056][T17237] __x64_sys_fallocate+0x75/0xc0 [ 1959.386062][T17237] do_syscall_64+0x3d/0x90 [ 1959.390677][T17237] ? irqentry_exit+0xe/0x30 [ 1959.395162][T17237] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1959.401047][T17237] RIP: 0033:0x4665f9 [ 1959.404922][T17237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1959.424711][T17237] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1959.433184][T17237] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1959.441147][T17237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1959.449105][T17237] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1959.457059][T17237] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1959.465068][T17237] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:12 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf7a0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:12 executing program 2 (fault-call:11 fault-nth:24): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1959.552912][T17246] loop4: detected capacity change from 0 to 224 [ 1959.563173][T17223] loop5: detected capacity change from 0 to 544 [ 1959.582639][T17223] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1959.601587][T17248] FAULT_INJECTION: forcing a failure. [ 1959.601587][T17248] name failslab, interval 1, probability 0, space 0, times 0 [ 1959.614326][T17248] CPU: 1 PID: 17248 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1959.624131][T17248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1959.634210][T17248] Call Trace: [ 1959.637481][T17248] dump_stack_lvl+0xb7/0x103 [ 1959.642072][T17248] dump_stack+0x11/0x1a [ 1959.646235][T17248] should_fail+0x23c/0x250 [ 1959.650655][T17248] ? kcalloc+0x32/0x50 [ 1959.654715][T17248] __should_failslab+0x81/0x90 [ 1959.659516][T17248] should_failslab+0x5/0x20 [ 1959.664014][T17248] __kmalloc+0x66/0x340 [ 1959.668164][T17248] ? chksum_update+0x39/0x50 [ 1959.672762][T17248] kcalloc+0x32/0x50 [ 1959.676654][T17248] ext4_find_extent+0x21c/0x7f0 [ 1959.681495][T17248] ext4_ext_map_blocks+0xd9/0x1f10 [ 1959.686611][T17248] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1959.692769][T17248] ? __down_write_common+0x42/0x810 [ 1959.697962][T17248] ? tsan.module_ctor+0x10/0x10 06:12:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000041000000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:12 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x120d9, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1959.702810][T17248] ? ext4_es_lookup_extent+0x36b/0x490 [ 1959.708269][T17248] ext4_map_blocks+0x70d/0xef0 [ 1959.713309][T17248] ? ext4_alloc_file_blocks+0x248/0x720 [ 1959.718893][T17248] ? __cond_resched+0x11/0x40 [ 1959.723666][T17248] ext4_alloc_file_blocks+0x271/0x720 [ 1959.729032][T17248] ext4_fallocate+0x2a7/0x4d0 [ 1959.733698][T17248] ? ext4_ext_truncate+0x170/0x170 [ 1959.738929][T17248] vfs_fallocate+0x459/0x6a0 [ 1959.743513][T17248] __x64_sys_fallocate+0x75/0xc0 [ 1959.748444][T17248] do_syscall_64+0x3d/0x90 [ 1959.752862][T17248] ? irqentry_exit+0xe/0x30 [ 1959.757384][T17248] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1959.763329][T17248] RIP: 0033:0x4665f9 [ 1959.767243][T17248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1959.787157][T17248] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1959.795899][T17248] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 06:12:12 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bfcf0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:12 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xc, 0x40000006) 06:12:12 executing program 2 (fault-call:11 fault-nth:25): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1959.803859][T17248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1959.811849][T17248] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1959.819812][T17248] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1959.827786][T17248] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:12 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7000, 0x40000006) [ 1959.910880][T17266] loop5: detected capacity change from 0 to 544 [ 1959.930094][T17266] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1959.977471][T17283] loop4: detected capacity change from 0 to 224 [ 1959.982256][T17278] FAULT_INJECTION: forcing a failure. [ 1959.982256][T17278] name failslab, interval 1, probability 0, space 0, times 0 [ 1959.996900][T17278] CPU: 1 PID: 17278 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1960.006699][T17278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1960.006713][T17278] Call Trace: [ 1960.006720][T17278] dump_stack_lvl+0xb7/0x103 06:12:13 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bfd10000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1960.006743][T17278] dump_stack+0x11/0x1a [ 1960.028735][T17278] should_fail+0x23c/0x250 [ 1960.033209][T17278] ? kcalloc+0x32/0x50 [ 1960.037566][T17278] __should_failslab+0x81/0x90 [ 1960.042359][T17278] should_failslab+0x5/0x20 [ 1960.046853][T17278] __kmalloc+0x66/0x340 [ 1960.051008][T17278] ? chksum_update+0x39/0x50 [ 1960.055601][T17278] kcalloc+0x32/0x50 [ 1960.059564][T17278] ext4_find_extent+0x21c/0x7f0 [ 1960.064516][T17278] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1960.070322][T17278] ext4_ext_map_blocks+0xd9/0x1f10 [ 1960.075457][T17278] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1960.081632][T17278] ? __down_write_common+0x42/0x810 [ 1960.086838][T17278] ? percpu_counter_add_batch+0x69/0xd0 [ 1960.092366][T17278] ? ext4_es_lookup_extent+0x36b/0x490 [ 1960.098032][T17278] ext4_map_blocks+0x70d/0xef0 [ 1960.102799][T17278] ? ext4_alloc_file_blocks+0x248/0x720 [ 1960.108393][T17278] ? __cond_resched+0x11/0x40 [ 1960.113163][T17278] ext4_alloc_file_blocks+0x271/0x720 [ 1960.118722][T17278] ext4_fallocate+0x2a7/0x4d0 [ 1960.123464][T17278] ? ext4_ext_truncate+0x170/0x170 [ 1960.129071][T17278] vfs_fallocate+0x459/0x6a0 [ 1960.133782][T17278] __x64_sys_fallocate+0x75/0xc0 [ 1960.138696][T17278] do_syscall_64+0x3d/0x90 [ 1960.143096][T17278] ? irqentry_exit+0xe/0x30 [ 1960.147579][T17278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1960.153538][T17278] RIP: 0033:0x4665f9 [ 1960.157440][T17278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:12:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000201000000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1960.177033][T17278] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1960.185455][T17278] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1960.193402][T17278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1960.201367][T17278] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1960.209408][T17278] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1960.217367][T17278] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:13 executing program 2 (fault-call:11 fault-nth:26): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:13 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7c00, 0x40000006) 06:12:13 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xd, 0x40000006) [ 1960.285753][T17299] loop5: detected capacity change from 0 to 544 [ 1960.301657][T17299] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1960.320631][T17311] loop4: detected capacity change from 0 to 224 06:12:13 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bfde0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1960.349649][T17299] loop5: detected capacity change from 0 to 544 [ 1960.378799][T17308] FAULT_INJECTION: forcing a failure. [ 1960.378799][T17308] name failslab, interval 1, probability 0, space 0, times 0 [ 1960.391514][T17308] CPU: 1 PID: 17308 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1960.394217][T17299] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1960.401323][T17308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1960.401336][T17308] Call Trace: [ 1960.401345][T17308] dump_stack_lvl+0xb7/0x103 [ 1960.429182][T17308] dump_stack+0x11/0x1a [ 1960.433352][T17308] should_fail+0x23c/0x250 [ 1960.437784][T17308] ? ext4_mb_new_blocks+0x70f/0x1f90 [ 1960.443163][T17308] __should_failslab+0x81/0x90 [ 1960.447919][T17308] should_failslab+0x5/0x20 [ 1960.452453][T17308] kmem_cache_alloc+0x46/0x2e0 [ 1960.457213][T17308] ext4_mb_new_blocks+0x70f/0x1f90 [ 1960.462318][T17308] ? ext4_find_extent+0x7b2/0x7f0 [ 1960.467416][T17308] ? ext4_ext_search_right+0x2e3/0x540 [ 1960.472875][T17308] ext4_ext_map_blocks+0x1579/0x1f10 [ 1960.478189][T17308] ext4_map_blocks+0x70d/0xef0 [ 1960.482956][T17308] ? ext4_alloc_file_blocks+0x248/0x720 [ 1960.488748][T17308] ? __cond_resched+0x11/0x40 [ 1960.493421][T17308] ext4_alloc_file_blocks+0x271/0x720 06:12:13 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1e8c0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1960.498965][T17308] ext4_fallocate+0x2a7/0x4d0 [ 1960.503706][T17308] ? ext4_ext_truncate+0x170/0x170 [ 1960.508814][T17308] vfs_fallocate+0x459/0x6a0 [ 1960.513400][T17308] __x64_sys_fallocate+0x75/0xc0 [ 1960.518332][T17308] do_syscall_64+0x3d/0x90 [ 1960.522815][T17308] ? irqentry_exit+0xe/0x30 [ 1960.527545][T17308] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1960.533442][T17308] RIP: 0033:0x4665f9 [ 1960.537509][T17308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1960.558967][T17308] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1960.567380][T17308] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1960.575516][T17308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1960.583830][T17308] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1960.592142][T17308] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 06:12:13 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7d01, 0x40000006) 06:12:13 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xe, 0x40000006) [ 1960.600374][T17308] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000001100000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:13 executing program 2 (fault-call:11 fault-nth:27): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1960.663878][T17335] loop4: detected capacity change from 0 to 224 [ 1960.687345][T17341] loop5: detected capacity change from 0 to 544 06:12:13 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bfdf0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1960.705516][T17341] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1960.776727][T17341] loop5: detected capacity change from 0 to 544 [ 1960.790358][T17341] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1960.809989][T17348] FAULT_INJECTION: forcing a failure. [ 1960.809989][T17348] name failslab, interval 1, probability 0, space 0, times 0 06:12:13 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1ec01, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1960.822835][T17348] CPU: 1 PID: 17348 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1960.832635][T17348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1960.842685][T17348] Call Trace: [ 1960.845950][T17348] dump_stack_lvl+0xb7/0x103 [ 1960.850539][T17348] dump_stack+0x11/0x1a [ 1960.854920][T17348] should_fail+0x23c/0x250 [ 1960.859339][T17348] ? __es_insert_extent+0x51f/0xe70 [ 1960.864538][T17348] __should_failslab+0x81/0x90 [ 1960.869298][T17348] should_failslab+0x5/0x20 [ 1960.873963][T17348] kmem_cache_alloc+0x46/0x2e0 [ 1960.878730][T17348] __es_insert_extent+0x51f/0xe70 [ 1960.883760][T17348] ext4_es_insert_extent+0x1bb/0x19d0 [ 1960.889129][T17348] ext4_map_blocks+0xa4c/0xef0 [ 1960.893920][T17348] ? ext4_alloc_file_blocks+0x248/0x720 [ 1960.899509][T17348] ? __cond_resched+0x11/0x40 [ 1960.904243][T17348] ext4_alloc_file_blocks+0x271/0x720 [ 1960.909625][T17348] ext4_fallocate+0x2a7/0x4d0 [ 1960.914347][T17348] ? ext4_ext_truncate+0x170/0x170 [ 1960.919448][T17348] vfs_fallocate+0x459/0x6a0 [ 1960.924047][T17348] __x64_sys_fallocate+0x75/0xc0 [ 1960.929009][T17348] do_syscall_64+0x3d/0x90 [ 1960.933441][T17348] ? irqentry_exit+0xe/0x30 [ 1960.937959][T17348] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1960.944042][T17348] RIP: 0033:0x4665f9 [ 1960.948018][T17348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1960.967708][T17348] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1960.976124][T17348] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1960.984094][T17348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1960.992063][T17348] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1961.000073][T17348] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1961.008047][T17348] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:14 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xf, 0x40000006) 06:12:14 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffe0000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1961.023818][T17359] loop4: detected capacity change from 0 to 224 06:12:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000001200000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:14 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7e01, 0x40000006) 06:12:14 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1eea7, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1961.083017][T17377] loop5: detected capacity change from 0 to 544 [ 1961.103739][T17377] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1961.152459][T17387] loop4: detected capacity change from 0 to 224 [ 1961.172758][T17377] loop5: detected capacity change from 0 to 544 [ 1961.192991][T17377] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:14 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf040200000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:14 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x8102, 0x40000006) 06:12:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000021800000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1961.252985][T17396] loop4: detected capacity change from 0 to 224 06:12:14 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000300000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1961.341225][T17411] loop5: detected capacity change from 0 to 544 [ 1961.359820][T17411] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1961.369283][T17413] loop4: detected capacity change from 0 to 224 06:12:14 executing program 2 (fault-call:11 fault-nth:28): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:14 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x20049, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:14 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf200300000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:14 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x10, 0x40000006) [ 1961.414233][T17411] loop5: detected capacity change from 0 to 544 [ 1961.423434][T17411] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000501a00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:14 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x8604, 0x40000006) [ 1961.525017][T17434] FAULT_INJECTION: forcing a failure. [ 1961.525017][T17434] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.531171][T17444] loop5: detected capacity change from 0 to 544 [ 1961.537817][T17434] CPU: 0 PID: 17434 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1961.553881][T17434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.563922][T17434] Call Trace: [ 1961.567190][T17434] dump_stack_lvl+0xb7/0x103 [ 1961.571773][T17434] dump_stack+0x11/0x1a [ 1961.575917][T17434] should_fail+0x23c/0x250 [ 1961.580323][T17434] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1961.585592][T17434] __should_failslab+0x81/0x90 [ 1961.590341][T17434] should_failslab+0x5/0x20 [ 1961.595023][T17434] kmem_cache_alloc+0x46/0x2e0 [ 1961.599768][T17434] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1961.605235][T17434] ? ext4_find_extent+0x7b2/0x7f0 [ 1961.610533][T17434] ? ext4_ext_search_right+0x2e3/0x540 [ 1961.616099][T17434] ext4_ext_map_blocks+0x1579/0x1f10 [ 1961.621373][T17434] ext4_map_blocks+0x70d/0xef0 [ 1961.626128][T17434] ? __ext4_journal_stop+0x18/0x110 [ 1961.631319][T17434] ? ext4_alloc_file_blocks+0x248/0x720 [ 1961.636954][T17434] ? __cond_resched+0x11/0x40 [ 1961.641648][T17434] ext4_alloc_file_blocks+0x271/0x720 [ 1961.647015][T17434] ext4_fallocate+0x2a7/0x4d0 [ 1961.651672][T17434] ? ext4_ext_truncate+0x170/0x170 [ 1961.656768][T17434] vfs_fallocate+0x459/0x6a0 [ 1961.661349][T17434] __x64_sys_fallocate+0x75/0xc0 [ 1961.666362][T17434] do_syscall_64+0x3d/0x90 [ 1961.670778][T17434] ? irqentry_exit+0xe/0x30 [ 1961.675267][T17434] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1961.681231][T17434] RIP: 0033:0x4665f9 [ 1961.685118][T17434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1961.704779][T17434] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1961.713176][T17434] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1961.721214][T17434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1961.729186][T17434] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1961.737191][T17434] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1961.745166][T17434] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:14 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x11, 0x40000006) 06:12:14 executing program 2 (fault-call:11 fault-nth:29): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:14 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x9c01, 0x40000006) [ 1961.769760][T17444] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1961.782669][T17450] loop4: detected capacity change from 0 to 224 [ 1961.812813][T17444] loop5: detected capacity change from 0 to 544 06:12:14 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf210300000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1961.834123][T17444] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000002000000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:14 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf2e0300000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1961.893862][T17468] loop4: detected capacity change from 0 to 224 [ 1961.940943][T17478] loop5: detected capacity change from 0 to 544 [ 1961.942097][T17464] FAULT_INJECTION: forcing a failure. [ 1961.942097][T17464] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.960031][T17464] CPU: 1 PID: 17464 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1961.960903][T17478] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1961.969838][T17464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:12:15 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf2f0300000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1961.969851][T17464] Call Trace: [ 1961.969859][T17464] dump_stack_lvl+0xb7/0x103 [ 1961.969882][T17464] dump_stack+0x11/0x1a [ 1961.969899][T17464] should_fail+0x23c/0x250 [ 1962.006275][T17464] ? kcalloc+0x32/0x50 [ 1962.010352][T17464] __should_failslab+0x81/0x90 [ 1962.015154][T17464] should_failslab+0x5/0x20 [ 1962.019653][T17464] __kmalloc+0x66/0x340 [ 1962.023800][T17464] ? chksum_update+0x39/0x50 [ 1962.029178][T17464] kcalloc+0x32/0x50 [ 1962.033071][T17464] ext4_find_extent+0x21c/0x7f0 [ 1962.038443][T17464] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1962.044327][T17464] ext4_ext_map_blocks+0xd9/0x1f10 [ 1962.049437][T17464] ? __ext4_handle_dirty_metadata+0x20c/0x590 [ 1962.055512][T17464] ? __ext4_update_other_inode_time+0x1b1/0x5c0 [ 1962.061756][T17464] ? __down_write_common+0x42/0x810 [ 1962.067280][T17464] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1962.073085][T17464] ? percpu_counter_add_batch+0x69/0xd0 [ 1962.078635][T17464] ? ext4_es_lookup_extent+0x36b/0x490 [ 1962.084725][T17464] ext4_map_blocks+0x70d/0xef0 [ 1962.089572][T17464] ? ext4_alloc_file_blocks+0x248/0x720 [ 1962.095137][T17464] ? __cond_resched+0x11/0x40 [ 1962.099810][T17464] ext4_alloc_file_blocks+0x271/0x720 [ 1962.105178][T17464] ext4_fallocate+0x2a7/0x4d0 [ 1962.110195][T17464] ? ext4_ext_truncate+0x170/0x170 [ 1962.115407][T17464] vfs_fallocate+0x459/0x6a0 [ 1962.119989][T17464] __x64_sys_fallocate+0x75/0xc0 [ 1962.125188][T17464] do_syscall_64+0x3d/0x90 [ 1962.129632][T17464] ? irqentry_exit+0xe/0x30 [ 1962.134126][T17464] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1962.140078][T17464] RIP: 0033:0x4665f9 [ 1962.143964][T17464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1962.163659][T17464] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1962.172150][T17464] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1962.180153][T17464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1962.188148][T17464] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1962.196175][T17464] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1962.204165][T17464] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:15 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x20300, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:15 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x12, 0x40000006) 06:12:15 executing program 2 (fault-call:11 fault-nth:30): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:15 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x9d01, 0x40000006) 06:12:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000022000000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:15 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf020400000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1962.248405][T17478] loop5: detected capacity change from 0 to 544 [ 1962.250639][T17494] loop4: detected capacity change from 0 to 224 [ 1962.267235][T17478] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1962.341479][T17504] FAULT_INJECTION: forcing a failure. [ 1962.341479][T17504] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.354279][T17504] CPU: 0 PID: 17504 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1962.363164][T17513] loop5: detected capacity change from 0 to 544 [ 1962.364082][T17504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.364095][T17504] Call Trace: [ 1962.364102][T17504] dump_stack_lvl+0xb7/0x103 [ 1962.388444][T17504] dump_stack+0x11/0x1a [ 1962.392590][T17504] should_fail+0x23c/0x250 [ 1962.397009][T17504] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1962.402354][T17504] __should_failslab+0x81/0x90 [ 1962.407113][T17504] should_failslab+0x5/0x20 [ 1962.411599][T17504] kmem_cache_alloc+0x46/0x2e0 [ 1962.416352][T17504] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1962.421449][T17504] ? ext4_find_extent+0x7b2/0x7f0 [ 1962.426461][T17504] ? ext4_ext_search_right+0x2e3/0x540 [ 1962.431925][T17504] ext4_ext_map_blocks+0x1579/0x1f10 [ 1962.437245][T17504] ext4_map_blocks+0x70d/0xef0 [ 1962.441997][T17504] ? ext4_alloc_file_blocks+0x248/0x720 [ 1962.447549][T17504] ? __cond_resched+0x11/0x40 [ 1962.452231][T17504] ext4_alloc_file_blocks+0x271/0x720 [ 1962.457587][T17504] ext4_fallocate+0x2a7/0x4d0 [ 1962.462245][T17504] ? ext4_ext_truncate+0x170/0x170 [ 1962.467424][T17504] vfs_fallocate+0x459/0x6a0 [ 1962.471995][T17504] __x64_sys_fallocate+0x75/0xc0 [ 1962.476916][T17504] do_syscall_64+0x3d/0x90 [ 1962.481320][T17504] ? irqentry_exit+0xe/0x30 [ 1962.485805][T17504] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1962.491716][T17504] RIP: 0033:0x4665f9 [ 1962.495592][T17504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1962.515181][T17504] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1962.523578][T17504] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1962.531593][T17504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1962.539664][T17504] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1962.547617][T17504] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1962.555565][T17504] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1962.577528][T17513] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1962.588623][T17520] loop4: detected capacity change from 0 to 224 06:12:15 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xab01, 0x40000006) 06:12:15 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf060400000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:15 executing program 2 (fault-call:11 fault-nth:31): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1962.623815][T17513] loop5: detected capacity change from 0 to 544 [ 1962.635157][T17513] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1962.708459][ C0] scsi_io_completion_action: 41 callbacks suppressed [ 1962.708487][ C0] sd 0:0:1:0: tag#627 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1962.711239][ C1] sd 0:0:1:0: tag#631 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1962.715212][ C0] sd 0:0:1:0: tag#627 CDB: opcode=0xe5 (vendor) [ 1962.715229][ C0] sd 0:0:1:0: tag#627 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1962.724934][ C1] sd 0:0:1:0: tag#631 CDB: opcode=0xe5 (vendor) 06:12:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000102000000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1962.734650][ C0] sd 0:0:1:0: tag#627 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1962.740863][ C1] sd 0:0:1:0: tag#631 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1962.749782][ C0] sd 0:0:1:0: tag#627 CDB[20]: 2d [ 1962.755999][ C1] sd 0:0:1:0: tag#631 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1962.787788][ C1] sd 0:0:1:0: tag#631 CDB[20]: 2d [ 1962.826002][T17542] loop4: detected capacity change from 0 to 224 [ 1962.833056][T17549] loop5: detected capacity change from 0 to 544 [ 1962.846903][T17537] FAULT_INJECTION: forcing a failure. [ 1962.846903][T17537] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.859707][T17537] CPU: 1 PID: 17537 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1962.869509][T17537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.870479][T17549] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1962.879732][T17537] Call Trace: [ 1962.879743][T17537] dump_stack_lvl+0xb7/0x103 [ 1962.879766][T17537] dump_stack+0x11/0x1a [ 1962.901803][T17537] should_fail+0x23c/0x250 [ 1962.906239][T17537] ? ext4_mb_new_blocks+0x70f/0x1f90 [ 1962.911526][T17537] __should_failslab+0x81/0x90 [ 1962.916284][T17537] should_failslab+0x5/0x20 [ 1962.916309][T17537] kmem_cache_alloc+0x46/0x2e0 [ 1962.925549][T17537] ext4_mb_new_blocks+0x70f/0x1f90 [ 1962.925575][T17537] ? ext4_find_extent+0x7b2/0x7f0 [ 1962.935670][T17537] ? ext4_ext_search_right+0x2e3/0x540 [ 1962.941132][T17537] ext4_ext_map_blocks+0x1579/0x1f10 [ 1962.946469][T17537] ext4_map_blocks+0x70d/0xef0 [ 1962.951308][T17537] ? ext4_alloc_file_blocks+0x248/0x720 [ 1962.956845][T17537] ? __cond_resched+0x11/0x40 [ 1962.961603][T17537] ext4_alloc_file_blocks+0x271/0x720 [ 1962.967073][T17537] ext4_fallocate+0x2a7/0x4d0 06:12:16 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000500000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1962.972107][T17537] ? ext4_ext_truncate+0x170/0x170 [ 1962.977218][T17537] vfs_fallocate+0x459/0x6a0 [ 1962.982072][T17537] __x64_sys_fallocate+0x75/0xc0 [ 1962.987078][T17537] do_syscall_64+0x3d/0x90 [ 1962.991576][T17537] ? irqentry_exit+0xe/0x30 [ 1962.996077][T17537] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1963.001975][T17537] RIP: 0033:0x4665f9 [ 1963.005937][T17537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:12:16 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x18, 0x40000006) [ 1963.025545][T17537] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1963.034035][T17537] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1963.042074][T17537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1963.050363][T17537] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1963.058337][T17537] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1963.066365][T17537] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1963.108457][ C1] sd 0:0:1:0: tag#597 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1963.118503][ C1] sd 0:0:1:0: tag#597 CDB: opcode=0xe5 (vendor) [ 1963.122427][T17570] loop4: detected capacity change from 0 to 224 [ 1963.124763][ C1] sd 0:0:1:0: tag#597 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1963.139996][ C1] sd 0:0:1:0: tag#597 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1963.148993][ C1] sd 0:0:1:0: tag#597 CDB[20]: 2d 06:12:16 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x205b2, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:16 executing program 2 (fault-call:11 fault-nth:32): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:16 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x48, 0x40000006) 06:12:16 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000600000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1963.161396][T17549] loop5: detected capacity change from 0 to 544 [ 1963.174979][T17549] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:16 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xac01, 0x40000006) [ 1963.223041][ C0] sd 0:0:1:0: tag#610 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1963.232795][ C0] sd 0:0:1:0: tag#610 CDB: opcode=0xe5 (vendor) [ 1963.239059][ C0] sd 0:0:1:0: tag#610 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1963.248004][ C0] sd 0:0:1:0: tag#610 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1963.255600][ C1] sd 0:0:1:0: tag#622 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1963.256951][ C0] sd 0:0:1:0: tag#610 CDB[20]: 2d [ 1963.266699][ C1] sd 0:0:1:0: tag#622 CDB: opcode=0xe5 (vendor) [ 1963.277938][ C1] sd 0:0:1:0: tag#622 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1963.285452][T17584] FAULT_INJECTION: forcing a failure. [ 1963.285452][T17584] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.287732][ C1] sd 0:0:1:0: tag#622 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1963.287752][ C1] sd 0:0:1:0: tag#622 CDB[20]: 2d [ 1963.314495][T17584] CPU: 0 PID: 17584 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1963.324450][T17584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1963.334505][T17584] Call Trace: [ 1963.337842][T17584] dump_stack_lvl+0xb7/0x103 [ 1963.343211][T17584] dump_stack+0x11/0x1a [ 1963.347452][T17584] should_fail+0x23c/0x250 [ 1963.351932][T17584] ? kcalloc+0x32/0x50 [ 1963.356227][T17584] __should_failslab+0x81/0x90 [ 1963.360985][T17584] should_failslab+0x5/0x20 [ 1963.365470][T17584] __kmalloc+0x66/0x340 [ 1963.369607][T17584] ? chksum_update+0x39/0x50 [ 1963.374258][T17584] kcalloc+0x32/0x50 [ 1963.378198][T17584] ext4_find_extent+0x21c/0x7f0 [ 1963.383027][T17584] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1963.389172][T17584] ext4_ext_map_blocks+0xd9/0x1f10 [ 1963.394297][T17584] ? __ext4_handle_dirty_metadata+0x20c/0x590 [ 1963.400438][T17584] ? __ext4_update_other_inode_time+0x1b1/0x5c0 [ 1963.406670][T17584] ? __down_write_common+0x42/0x810 [ 1963.411950][T17584] ? percpu_counter_add_batch+0x69/0xd0 [ 1963.417574][T17584] ? ext4_es_lookup_extent+0x36b/0x490 [ 1963.423018][T17584] ext4_map_blocks+0x70d/0xef0 [ 1963.427815][T17584] ? ext4_alloc_file_blocks+0x248/0x720 [ 1963.433343][T17584] ? __cond_resched+0x11/0x40 [ 1963.438090][T17584] ext4_alloc_file_blocks+0x271/0x720 [ 1963.443591][T17584] ext4_fallocate+0x2a7/0x4d0 [ 1963.448260][T17584] ? ext4_ext_truncate+0x170/0x170 [ 1963.453353][T17584] vfs_fallocate+0x459/0x6a0 [ 1963.457939][T17584] __x64_sys_fallocate+0x75/0xc0 [ 1963.462862][T17584] do_syscall_64+0x3d/0x90 [ 1963.467267][T17584] ? irqentry_exit+0xe/0x30 [ 1963.471895][T17584] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1963.477792][T17584] RIP: 0033:0x4665f9 [ 1963.481735][T17584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.501350][T17584] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1963.509744][T17584] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1963.517789][T17584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1963.525747][T17584] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1963.533716][T17584] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1963.541672][T17584] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000002200000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:16 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf040600000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1963.613597][T17601] loop4: detected capacity change from 0 to 224 [ 1963.646602][T17607] loop5: detected capacity change from 0 to 544 06:12:16 executing program 2 (fault-call:11 fault-nth:33): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1963.675947][T17607] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1963.712202][T17617] loop4: detected capacity change from 0 to 224 06:12:16 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x50, 0x40000006) [ 1963.715015][ C0] sd 0:0:1:0: tag#583 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1963.728206][ C0] sd 0:0:1:0: tag#583 CDB: opcode=0xe5 (vendor) [ 1963.734735][ C0] sd 0:0:1:0: tag#583 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1963.743776][ C0] sd 0:0:1:0: tag#583 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1963.752832][ C0] sd 0:0:1:0: tag#583 CDB[20]: 2d [ 1963.763922][T17607] loop5: detected capacity change from 0 to 544 06:12:16 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000700000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1963.785032][T17607] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1963.811758][ C0] sd 0:0:1:0: tag#595 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1963.812273][ C1] sd 0:0:1:0: tag#596 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1963.821530][ C0] sd 0:0:1:0: tag#595 CDB: opcode=0xe5 (vendor) [ 1963.831230][ C1] sd 0:0:1:0: tag#596 CDB: opcode=0xe5 (vendor) [ 1963.837456][ C0] sd 0:0:1:0: tag#595 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1963.843693][ C1] sd 0:0:1:0: tag#596 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1963.852605][ C0] sd 0:0:1:0: tag#595 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1963.861503][ C1] sd 0:0:1:0: tag#596 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1963.870434][ C0] sd 0:0:1:0: tag#595 CDB[20]: 2d [ 1963.879345][ C1] sd 0:0:1:0: tag#596 CDB[20]: 2d [ 1963.898584][T17621] FAULT_INJECTION: forcing a failure. [ 1963.898584][T17621] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.911842][T17621] CPU: 0 PID: 17621 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1963.921638][T17621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1963.931971][T17621] Call Trace: [ 1963.935343][T17621] dump_stack_lvl+0xb7/0x103 [ 1963.939932][T17621] dump_stack+0x11/0x1a [ 1963.944092][T17621] should_fail+0x23c/0x250 [ 1963.948540][T17621] ? kcalloc+0x32/0x50 [ 1963.952672][T17621] __should_failslab+0x81/0x90 [ 1963.957524][T17621] should_failslab+0x5/0x20 [ 1963.962023][T17621] __kmalloc+0x66/0x340 [ 1963.966315][T17621] ? chksum_update+0x39/0x50 [ 1963.971173][T17621] kcalloc+0x32/0x50 [ 1963.975337][T17621] ext4_find_extent+0x21c/0x7f0 [ 1963.980181][T17621] ? sysvec_apic_timer_interrupt+0x3e/0x80 06:12:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000002500000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1963.986043][T17621] ext4_ext_map_blocks+0xd9/0x1f10 [ 1963.991156][T17621] ? __ext4_handle_dirty_metadata+0x20c/0x590 [ 1963.997231][T17621] ? __ext4_update_other_inode_time+0x1bb/0x5c0 [ 1963.998315][ C1] sd 0:0:1:0: tag#600 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1964.003521][T17621] ? __down_write_common+0x42/0x810 [ 1964.003545][T17621] ? percpu_counter_add_batch+0x69/0xd0 [ 1964.013285][ C1] sd 0:0:1:0: tag#600 CDB: opcode=0xe5 (vendor) [ 1964.018445][T17621] ? ext4_es_lookup_extent+0x36b/0x490 [ 1964.024012][ C1] sd 0:0:1:0: tag#600 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1964.030281][T17621] ext4_map_blocks+0x70d/0xef0 [ 1964.036080][ C1] sd 0:0:1:0: tag#600 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1964.044964][T17621] ? ext4_alloc_file_blocks+0x248/0x720 [ 1964.049725][ C1] sd 0:0:1:0: tag#600 CDB[20]: 2d [ 1964.058611][T17621] ? __cond_resched+0x11/0x40 [ 1964.073137][ C1] sd 0:0:1:0: tag#604 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1964.073849][T17621] ext4_alloc_file_blocks+0x271/0x720 [ 1964.083578][ C1] sd 0:0:1:0: tag#604 CDB: opcode=0xe5 (vendor) [ 1964.088891][T17621] ext4_fallocate+0x2a7/0x4d0 [ 1964.095129][ C1] sd 0:0:1:0: tag#604 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1964.099754][T17621] ? ext4_ext_truncate+0x170/0x170 [ 1964.109636][ C1] sd 0:0:1:0: tag#604 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1964.114796][T17621] vfs_fallocate+0x459/0x6a0 [ 1964.124349][ C1] sd 0:0:1:0: tag#604 CDB[20]: 2d 06:12:17 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x58, 0x40000006) [ 1964.128894][T17621] __x64_sys_fallocate+0x75/0xc0 [ 1964.138818][T17621] do_syscall_64+0x3d/0x90 [ 1964.143325][T17621] ? irqentry_exit+0xe/0x30 [ 1964.147866][T17621] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1964.153848][T17621] RIP: 0033:0x4665f9 [ 1964.157732][T17621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.177342][T17621] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1964.185830][T17621] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1964.193802][T17621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1964.201784][T17621] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1964.209752][T17621] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1964.217720][T17621] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:17 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x20a80, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:17 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xad01, 0x40000006) [ 1964.233240][T17630] loop4: detected capacity change from 0 to 224 [ 1964.250553][T17645] loop5: detected capacity change from 0 to 544 06:12:17 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffc0700000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1964.281959][T17645] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:17 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x60, 0x40000006) [ 1964.350214][T17654] loop4: detected capacity change from 0 to 224 [ 1964.359387][T17645] loop5: detected capacity change from 0 to 544 [ 1964.389263][T17645] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:17 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000900000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000002e00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:17 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x20c00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:17 executing program 2 (fault-call:11 fault-nth:34): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:17 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf600900000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:17 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xfc03, 0x40000006) [ 1964.528671][T17675] loop4: detected capacity change from 0 to 224 [ 1964.596194][T17686] loop5: detected capacity change from 0 to 544 [ 1964.618495][T17686] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1964.642378][T17690] FAULT_INJECTION: forcing a failure. [ 1964.642378][T17690] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.655186][T17690] CPU: 0 PID: 17690 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1964.664988][T17690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1964.676626][T17690] Call Trace: [ 1964.679899][T17690] dump_stack_lvl+0xb7/0x103 [ 1964.684591][T17690] dump_stack+0x11/0x1a [ 1964.688745][T17690] should_fail+0x23c/0x250 [ 1964.693635][T17690] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1964.699059][T17690] __should_failslab+0x81/0x90 [ 1964.703821][T17690] should_failslab+0x5/0x20 [ 1964.708315][T17690] kmem_cache_alloc+0x46/0x2e0 [ 1964.713096][T17690] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1964.718205][T17690] ? ext4_ext_search_right+0x25/0x540 [ 1964.723575][T17690] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 1964.729037][T17690] ? ext4_ext_search_right+0x2e3/0x540 [ 1964.734492][T17690] ext4_ext_map_blocks+0x1579/0x1f10 [ 1964.739778][T17690] ext4_map_blocks+0x70d/0xef0 06:12:17 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xfe00, 0x40000006) 06:12:17 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x68, 0x40000006) [ 1964.744546][T17690] ? ext4_alloc_file_blocks+0x248/0x720 [ 1964.750070][T17690] ? __cond_resched+0x11/0x40 [ 1964.754727][T17690] ext4_alloc_file_blocks+0x271/0x720 [ 1964.760141][T17690] ext4_fallocate+0x2a7/0x4d0 [ 1964.764872][T17690] ? ext4_ext_truncate+0x170/0x170 [ 1964.769993][T17690] vfs_fallocate+0x459/0x6a0 [ 1964.774588][T17690] __x64_sys_fallocate+0x75/0xc0 [ 1964.779572][T17690] do_syscall_64+0x3d/0x90 [ 1964.783998][T17690] ? irqentry_exit+0xe/0x30 [ 1964.788507][T17690] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1964.794430][T17690] RIP: 0033:0x4665f9 [ 1964.798327][T17690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.799016][T17701] loop4: detected capacity change from 0 to 224 [ 1964.818104][T17690] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1964.818129][T17690] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 06:12:17 executing program 2 (fault-call:11 fault-nth:35): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1964.818140][T17690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1964.818151][T17690] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1964.818162][T17690] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1964.832810][T17690] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1964.889334][T17686] loop5: detected capacity change from 0 to 544 06:12:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000003f00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:18 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf610900000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1964.903789][T17686] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1964.978769][T17717] FAULT_INJECTION: forcing a failure. [ 1964.978769][T17717] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.991512][T17717] CPU: 0 PID: 17717 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1965.001313][T17717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.011408][T17717] Call Trace: [ 1965.014684][T17717] dump_stack_lvl+0xb7/0x103 [ 1965.019287][T17717] dump_stack+0x11/0x1a [ 1965.023441][T17717] should_fail+0x23c/0x250 [ 1965.027866][T17717] ? __es_insert_extent+0x51f/0xe70 [ 1965.033062][T17717] __should_failslab+0x81/0x90 [ 1965.037900][T17717] should_failslab+0x5/0x20 [ 1965.042399][T17717] kmem_cache_alloc+0x46/0x2e0 [ 1965.047153][T17717] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1965.052959][T17717] __es_insert_extent+0x51f/0xe70 [ 1965.058057][T17717] ext4_es_insert_extent+0x1bb/0x19d0 [ 1965.063451][T17717] ext4_map_blocks+0xa4c/0xef0 [ 1965.068389][T17717] ? ext4_alloc_file_blocks+0x248/0x720 [ 1965.074043][T17717] ? __cond_resched+0x11/0x40 [ 1965.078717][T17717] ext4_alloc_file_blocks+0x271/0x720 [ 1965.084089][T17717] ext4_fallocate+0x2a7/0x4d0 [ 1965.088844][T17717] ? ext4_ext_truncate+0x170/0x170 [ 1965.093964][T17717] vfs_fallocate+0x459/0x6a0 [ 1965.098554][T17717] __x64_sys_fallocate+0x75/0xc0 [ 1965.103493][T17717] do_syscall_64+0x3d/0x90 [ 1965.107946][T17717] ? irqentry_exit+0xe/0x30 [ 1965.112452][T17717] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1965.118363][T17717] RIP: 0033:0x4665f9 [ 1965.122312][T17717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1965.142550][T17717] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1965.150959][T17717] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1965.158928][T17717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1965.166888][T17717] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 06:12:18 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x20e00, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:18 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xff00, 0x40000006) 06:12:18 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x70, 0x40000006) 06:12:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000004000000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1965.174859][T17717] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1965.182864][T17717] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1965.202502][T17730] loop5: detected capacity change from 0 to 544 [ 1965.210778][T17730] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1965.212226][T17722] loop4: detected capacity change from 0 to 224 06:12:18 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000a00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1965.328989][T17747] loop5: detected capacity change from 0 to 544 06:12:18 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x78, 0x40000006) [ 1965.379571][T17756] loop4: detected capacity change from 0 to 224 [ 1965.386193][T17747] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:18 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000b00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:18 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x21200, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1965.459381][T17747] loop5: detected capacity change from 0 to 544 [ 1965.473272][T17747] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1965.484212][T17770] loop4: detected capacity change from 0 to 224 06:12:18 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000c00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1965.618400][T17792] loop4: detected capacity change from 0 to 224 06:12:18 executing program 2 (fault-call:11 fault-nth:36): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000004400000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:18 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x281a4, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:18 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000d00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:18 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xff01, 0x40000006) 06:12:18 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x281, 0x40000006) [ 1965.713503][T17804] loop5: detected capacity change from 0 to 544 [ 1965.734180][T17804] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1965.736204][T17806] FAULT_INJECTION: forcing a failure. [ 1965.736204][T17806] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.757029][T17806] CPU: 1 PID: 17806 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1965.766833][T17806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.776887][T17806] Call Trace: [ 1965.780166][T17806] dump_stack_lvl+0xb7/0x103 [ 1965.784786][T17806] dump_stack+0x11/0x1a [ 1965.788983][T17806] should_fail+0x23c/0x250 [ 1965.793476][T17806] ? kcalloc+0x32/0x50 [ 1965.797533][T17806] __should_failslab+0x81/0x90 [ 1965.802301][T17806] should_failslab+0x5/0x20 [ 1965.806797][T17806] __kmalloc+0x66/0x340 [ 1965.810959][T17806] ? chksum_update+0x39/0x50 [ 1965.815577][T17806] kcalloc+0x32/0x50 [ 1965.819539][T17806] ext4_find_extent+0x21c/0x7f0 [ 1965.824380][T17806] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1965.830343][T17806] ext4_ext_map_blocks+0xd9/0x1f10 [ 1965.835447][T17806] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1965.841605][T17806] ? __down_write_common+0x42/0x810 [ 1965.846888][T17806] ? percpu_counter_add_batch+0x69/0xd0 [ 1965.852431][T17806] ? ext4_es_lookup_extent+0x36b/0x490 [ 1965.857888][T17806] ext4_map_blocks+0x70d/0xef0 [ 1965.862641][T17806] ? ext4_alloc_file_blocks+0x248/0x720 [ 1965.868297][T17806] ? __cond_resched+0x11/0x40 [ 1965.873007][T17806] ext4_alloc_file_blocks+0x271/0x720 [ 1965.878369][T17806] ext4_fallocate+0x2a7/0x4d0 [ 1965.883117][T17806] ? ext4_ext_truncate+0x170/0x170 [ 1965.888238][T17806] vfs_fallocate+0x459/0x6a0 [ 1965.892819][T17806] __x64_sys_fallocate+0x75/0xc0 [ 1965.897762][T17806] do_syscall_64+0x3d/0x90 [ 1965.902173][T17806] ? irqentry_exit+0xe/0x30 [ 1965.906738][T17806] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1965.912728][T17806] RIP: 0033:0x4665f9 [ 1965.916801][T17806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1965.936394][T17806] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1965.944796][T17806] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1965.952930][T17806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1965.960893][T17806] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1965.968914][T17806] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1965.976885][T17806] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:19 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000e00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:19 executing program 2 (fault-call:11 fault-nth:37): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1966.007895][T17821] loop4: detected capacity change from 0 to 224 [ 1966.022723][T17804] loop5: detected capacity change from 0 to 544 [ 1966.036630][T17804] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:19 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xff03, 0x40000006) 06:12:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000004800000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1966.139620][T17831] FAULT_INJECTION: forcing a failure. [ 1966.139620][T17831] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.152444][T17831] CPU: 1 PID: 17831 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1966.162247][T17831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1966.170203][T17843] loop5: detected capacity change from 0 to 544 [ 1966.172298][T17831] Call Trace: [ 1966.172307][T17831] dump_stack_lvl+0xb7/0x103 [ 1966.172330][T17831] dump_stack+0x11/0x1a [ 1966.190652][T17831] should_fail+0x23c/0x250 [ 1966.195264][T17831] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1966.200545][T17831] __should_failslab+0x81/0x90 [ 1966.205304][T17831] should_failslab+0x5/0x20 [ 1966.209807][T17831] kmem_cache_alloc+0x46/0x2e0 [ 1966.214567][T17831] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1966.219752][T17831] ? ext4_ext_search_right+0x196/0x540 [ 1966.225278][T17831] ? __tsan_read8+0x15/0x180 [ 1966.229908][T17831] ? ext4_ext_search_right+0x2e3/0x540 06:12:19 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xff0f, 0x40000006) [ 1966.235368][T17831] ext4_ext_map_blocks+0x1579/0x1f10 [ 1966.240661][T17831] ext4_map_blocks+0x70d/0xef0 [ 1966.245441][T17831] ? ext4_alloc_file_blocks+0x248/0x720 [ 1966.250994][T17831] ? __cond_resched+0x11/0x40 [ 1966.255670][T17831] ext4_alloc_file_blocks+0x271/0x720 [ 1966.261038][T17831] ext4_fallocate+0x2a7/0x4d0 [ 1966.265710][T17831] ? ext4_ext_truncate+0x170/0x170 [ 1966.270910][T17831] vfs_fallocate+0x459/0x6a0 [ 1966.275491][T17831] __x64_sys_fallocate+0x75/0xc0 [ 1966.280492][T17831] do_syscall_64+0x3d/0x90 [ 1966.284904][T17831] ? irqentry_exit+0xe/0x30 [ 1966.289770][T17831] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1966.295664][T17831] RIP: 0033:0x4665f9 [ 1966.299542][T17831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.319136][T17831] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1966.327533][T17831] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1966.335577][T17831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1966.343533][T17831] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1966.351536][T17831] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1966.359546][T17831] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1966.375444][T17849] loop4: detected capacity change from 0 to 224 06:12:19 executing program 2 (fault-call:11 fault-nth:38): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1966.378760][T17843] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:19 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x300, 0x40000006) 06:12:19 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000f00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1966.442230][T17856] FAULT_INJECTION: forcing a failure. [ 1966.442230][T17856] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.454984][T17856] CPU: 0 PID: 17856 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1966.464871][T17856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1966.475000][T17856] Call Trace: [ 1966.478276][T17856] dump_stack_lvl+0xb7/0x103 [ 1966.482861][T17856] dump_stack+0x11/0x1a [ 1966.487040][T17856] should_fail+0x23c/0x250 [ 1966.491473][T17856] ? __es_insert_extent+0x51f/0xe70 [ 1966.496703][T17856] __should_failslab+0x81/0x90 [ 1966.501526][T17856] should_failslab+0x5/0x20 [ 1966.506023][T17856] kmem_cache_alloc+0x46/0x2e0 [ 1966.510776][T17856] __es_insert_extent+0x51f/0xe70 [ 1966.515795][T17856] ext4_es_insert_extent+0x1bb/0x19d0 [ 1966.521192][T17856] ext4_map_blocks+0xa4c/0xef0 [ 1966.525979][T17856] ? ext4_alloc_file_blocks+0x248/0x720 [ 1966.531694][T17856] ? __cond_resched+0x11/0x40 [ 1966.536462][T17856] ext4_alloc_file_blocks+0x271/0x720 [ 1966.541865][T17856] ext4_fallocate+0x2a7/0x4d0 [ 1966.546536][T17856] ? ext4_ext_truncate+0x170/0x170 [ 1966.551857][T17856] vfs_fallocate+0x459/0x6a0 [ 1966.556560][T17856] __x64_sys_fallocate+0x75/0xc0 [ 1966.561492][T17856] do_syscall_64+0x3d/0x90 [ 1966.565910][T17856] ? irqentry_exit+0xe/0x30 [ 1966.570484][T17856] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1966.576461][T17856] RIP: 0033:0x4665f9 [ 1966.580402][T17856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.599999][T17856] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1966.608496][T17856] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1966.616465][T17856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1966.624443][T17856] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1966.632411][T17856] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 06:12:19 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x30000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000004c00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1966.640385][T17856] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:19 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x20695, 0x40000006) [ 1966.697098][T17868] loop4: detected capacity change from 0 to 224 [ 1966.707817][T17870] loop5: detected capacity change from 0 to 544 06:12:19 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf201000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1966.742352][T17870] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:19 executing program 2 (fault-call:11 fault-nth:39): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:19 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x382, 0x40000006) [ 1966.785043][T17884] loop4: detected capacity change from 0 to 224 [ 1966.805020][T17870] loop5: detected capacity change from 0 to 544 [ 1966.818363][T17870] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1966.855797][T17896] FAULT_INJECTION: forcing a failure. [ 1966.855797][T17896] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.868694][T17896] CPU: 0 PID: 17896 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1966.878496][T17896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1966.888548][T17896] Call Trace: [ 1966.891949][T17896] dump_stack_lvl+0xb7/0x103 [ 1966.896562][T17896] dump_stack+0x11/0x1a [ 1966.900743][T17896] should_fail+0x23c/0x250 06:12:19 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf001100000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1966.905189][T17896] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1966.910535][T17896] __should_failslab+0x81/0x90 [ 1966.915291][T17896] should_failslab+0x5/0x20 [ 1966.919798][T17896] kmem_cache_alloc+0x46/0x2e0 [ 1966.924574][T17896] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1966.929675][T17896] ? ext4_find_extent+0x7b2/0x7f0 [ 1966.934683][T17896] ? ext4_ext_search_right+0x2e3/0x540 [ 1966.940126][T17896] ext4_ext_map_blocks+0x1579/0x1f10 [ 1966.945406][T17896] ext4_map_blocks+0x70d/0xef0 [ 1966.950253][T17896] ? ext4_alloc_file_blocks+0x248/0x720 [ 1966.955846][T17896] ? __cond_resched+0x11/0x40 [ 1966.960517][T17896] ext4_alloc_file_blocks+0x271/0x720 [ 1966.965963][T17896] ext4_fallocate+0x2a7/0x4d0 [ 1966.970632][T17896] ? ext4_ext_truncate+0x170/0x170 [ 1966.975732][T17896] vfs_fallocate+0x459/0x6a0 [ 1966.980314][T17896] __x64_sys_fallocate+0x75/0xc0 [ 1966.985305][T17896] do_syscall_64+0x3d/0x90 [ 1966.989740][T17896] ? irqentry_exit+0xe/0x30 [ 1966.994239][T17896] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1967.000168][T17896] RIP: 0033:0x4665f9 [ 1967.004085][T17896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1967.023745][T17896] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1967.032910][T17896] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1967.040936][T17896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1967.048894][T17896] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 06:12:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000001a5000000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:20 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x30200, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1967.056855][T17896] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1967.064828][T17896] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:20 executing program 2 (fault-call:11 fault-nth:40): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:20 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x21800, 0x40000006) 06:12:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000006000000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1967.099203][T17904] loop5: detected capacity change from 0 to 544 [ 1967.115877][T17904] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1967.140311][T17911] loop4: detected capacity change from 0 to 224 [ 1967.196671][T17924] loop5: detected capacity change from 0 to 544 [ 1967.215384][T17924] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1967.223823][T17921] FAULT_INJECTION: forcing a failure. [ 1967.223823][T17921] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.238097][T17921] CPU: 1 PID: 17921 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1967.247898][T17921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.258001][T17921] Call Trace: [ 1967.261373][T17921] dump_stack_lvl+0xb7/0x103 [ 1967.265965][T17921] dump_stack+0x11/0x1a [ 1967.270112][T17921] should_fail+0x23c/0x250 [ 1967.274538][T17921] ? kcalloc+0x32/0x50 [ 1967.278597][T17921] __should_failslab+0x81/0x90 [ 1967.283353][T17921] should_failslab+0x5/0x20 [ 1967.287861][T17921] __kmalloc+0x66/0x340 [ 1967.292063][T17921] ? chksum_update+0x39/0x50 [ 1967.296643][T17921] kcalloc+0x32/0x50 [ 1967.300682][T17921] ext4_find_extent+0x21c/0x7f0 [ 1967.305535][T17921] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1967.311475][T17921] ext4_ext_map_blocks+0xd9/0x1f10 [ 1967.316583][T17921] ? percpu_counter_add_batch+0x5f/0xd0 [ 1967.322128][T17921] ? percpu_counter_add_batch+0x69/0xd0 [ 1967.327732][T17921] ? __sanitizer_cov_trace_pc+0xd/0x60 [ 1967.333274][T17921] ? __down_write_common+0x42/0x810 [ 1967.338555][T17921] ? percpu_counter_add_batch+0x69/0xd0 [ 1967.344098][T17921] ? ext4_es_lookup_extent+0x36b/0x490 [ 1967.349555][T17921] ext4_map_blocks+0x70d/0xef0 [ 1967.354407][T17921] ? ext4_alloc_file_blocks+0x248/0x720 [ 1967.359945][T17921] ? __cond_resched+0x11/0x40 [ 1967.364618][T17921] ext4_alloc_file_blocks+0x271/0x720 [ 1967.369984][T17921] ext4_fallocate+0x2a7/0x4d0 [ 1967.374689][T17921] ? ext4_ext_truncate+0x170/0x170 [ 1967.379854][T17921] vfs_fallocate+0x459/0x6a0 [ 1967.384438][T17921] __x64_sys_fallocate+0x75/0xc0 [ 1967.389524][T17921] do_syscall_64+0x3d/0x90 [ 1967.394025][T17921] ? irqentry_exit+0xe/0x30 [ 1967.398520][T17921] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1967.404429][T17921] RIP: 0033:0x4665f9 [ 1967.408307][T17921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1967.428533][T17921] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1967.437258][T17921] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 06:12:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000006800000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:20 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x500, 0x40000006) [ 1967.445371][T17921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1967.453341][T17921] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1967.461305][T17921] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1967.469297][T17921] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:20 executing program 2 (fault-call:11 fault-nth:41): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:20 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf001200000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:20 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x22000, 0x40000006) [ 1967.537153][T17934] loop5: detected capacity change from 0 to 544 [ 1967.554335][T17934] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1967.616524][T17934] loop5: detected capacity change from 0 to 544 [ 1967.623310][T17952] loop4: detected capacity change from 0 to 224 [ 1967.631276][T17934] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:20 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x30605, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1967.659320][T17946] FAULT_INJECTION: forcing a failure. [ 1967.659320][T17946] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.672314][T17946] CPU: 1 PID: 17946 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1967.682245][T17946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.692471][T17946] Call Trace: [ 1967.695743][T17946] dump_stack_lvl+0xb7/0x103 [ 1967.700338][T17946] dump_stack+0x11/0x1a [ 1967.704518][T17946] should_fail+0x23c/0x250 [ 1967.709022][T17946] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 1967.714298][T17946] __should_failslab+0x81/0x90 [ 1967.719111][T17946] should_failslab+0x5/0x20 [ 1967.723643][T17946] kmem_cache_alloc+0x46/0x2e0 [ 1967.728429][T17946] ext4_mb_new_blocks+0x2e7/0x1f90 [ 1967.733536][T17946] ? ext4_find_extent+0x7b2/0x7f0 [ 1967.738558][T17946] ? ext4_ext_search_right+0x2e3/0x540 [ 1967.744011][T17946] ext4_ext_map_blocks+0x1579/0x1f10 [ 1967.749290][T17946] ext4_map_blocks+0x70d/0xef0 [ 1967.754205][T17946] ? ext4_alloc_file_blocks+0x248/0x720 [ 1967.759748][T17946] ? __cond_resched+0x11/0x40 [ 1967.764431][T17946] ext4_alloc_file_blocks+0x271/0x720 [ 1967.769798][T17946] ext4_fallocate+0x2a7/0x4d0 [ 1967.774467][T17946] ? ext4_ext_truncate+0x170/0x170 [ 1967.779719][T17946] vfs_fallocate+0x459/0x6a0 [ 1967.784377][T17946] __x64_sys_fallocate+0x75/0xc0 [ 1967.789301][T17946] do_syscall_64+0x3d/0x90 [ 1967.793718][T17946] ? irqentry_exit+0xe/0x30 [ 1967.798218][T17946] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1967.804139][T17946] RIP: 0033:0x4665f9 [ 1967.808021][T17946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1967.827624][T17946] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1967.836038][T17946] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1967.843993][T17946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1967.852081][T17946] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 06:12:20 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x600, 0x40000006) 06:12:20 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf001800000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1967.860084][T17946] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1967.868204][T17946] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000006c00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:21 executing program 2 (fault-call:11 fault-nth:42): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x22800, 0x40000006) [ 1967.973682][ C0] scsi_io_completion_action: 36 callbacks suppressed [ 1967.973712][ C0] sd 0:0:1:0: tag#634 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1967.980284][T17984] loop5: detected capacity change from 0 to 544 [ 1967.980790][ C0] sd 0:0:1:0: tag#634 CDB: opcode=0xe5 (vendor) [ 1968.003219][ C0] sd 0:0:1:0: tag#634 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.012167][ C0] sd 0:0:1:0: tag#634 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1968.020213][ C1] sd 0:0:1:0: tag#592 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1968.021169][ C0] sd 0:0:1:0: tag#634 CDB[20]: 2d [ 1968.036023][ C1] sd 0:0:1:0: tag#592 CDB: opcode=0xe5 (vendor) [ 1968.040888][T17992] loop4: detected capacity change from 0 to 224 [ 1968.042272][ C1] sd 0:0:1:0: tag#592 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.057412][ C1] sd 0:0:1:0: tag#592 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1968.066451][ C1] sd 0:0:1:0: tag#592 CDB[20]: 2d [ 1968.110359][T17985] FAULT_INJECTION: forcing a failure. [ 1968.110359][T17985] name failslab, interval 1, probability 0, space 0, times 0 [ 1968.111736][ C1] sd 0:0:1:0: tag#605 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1968.123104][T17985] CPU: 0 PID: 17985 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1968.132901][ C1] sd 0:0:1:0: tag#605 CDB: opcode=0xe5 (vendor) [ 1968.142660][T17985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.142673][T17985] Call Trace: [ 1968.142680][T17985] dump_stack_lvl+0xb7/0x103 [ 1968.148928][ C1] sd 0:0:1:0: tag#605 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.158956][T17985] dump_stack+0x11/0x1a [ 1968.162262][ C1] sd 0:0:1:0: tag#605 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1968.166828][T17985] should_fail+0x23c/0x250 [ 1968.175750][ C1] sd 0:0:1:0: tag#605 CDB[20]: 2d [ 1968.179859][T17985] ? __es_insert_extent+0x51f/0xe70 [ 1968.204834][T17985] __should_failslab+0x81/0x90 [ 1968.209614][T17985] should_failslab+0x5/0x20 [ 1968.214142][T17985] kmem_cache_alloc+0x46/0x2e0 [ 1968.218927][T17985] __es_insert_extent+0x51f/0xe70 [ 1968.223947][T17985] ext4_es_insert_extent+0x1bb/0x19d0 [ 1968.229481][T17985] ext4_map_blocks+0xa4c/0xef0 [ 1968.234386][T17985] ? ext4_alloc_file_blocks+0x248/0x720 [ 1968.239973][T17985] ? __cond_resched+0x11/0x40 [ 1968.244650][T17985] ext4_alloc_file_blocks+0x271/0x720 [ 1968.250083][T17985] ext4_fallocate+0x2a7/0x4d0 [ 1968.254751][T17985] ? ext4_ext_truncate+0x170/0x170 [ 1968.259861][T17985] vfs_fallocate+0x459/0x6a0 [ 1968.264439][T17985] __x64_sys_fallocate+0x75/0xc0 [ 1968.269432][T17985] do_syscall_64+0x3d/0x90 [ 1968.273847][T17985] ? irqentry_exit+0xe/0x30 [ 1968.278567][T17985] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1968.284464][T17985] RIP: 0033:0x4665f9 [ 1968.288350][T17985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1968.307952][T17985] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1968.316381][T17985] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1968.324355][T17985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1968.332315][T17985] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1968.340314][T17985] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1968.348272][T17985] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:21 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x700, 0x40000006) 06:12:21 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf001900000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:21 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x38002, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1968.370117][T17984] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1968.433184][T17984] loop5: detected capacity change from 0 to 544 [ 1968.440933][T17984] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1968.458445][ C1] sd 0:0:1:0: tag#609 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1968.468206][ C1] sd 0:0:1:0: tag#609 CDB: opcode=0xe5 (vendor) [ 1968.474460][ C1] sd 0:0:1:0: tag#609 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.483405][ C1] sd 0:0:1:0: tag#609 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1968.492350][ C1] sd 0:0:1:0: tag#609 CDB[20]: 2d [ 1968.502613][T18013] loop4: detected capacity change from 0 to 224 [ 1968.509295][ C0] sd 0:0:1:0: tag#610 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1968.519061][ C0] sd 0:0:1:0: tag#610 CDB: opcode=0xe5 (vendor) 06:12:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x26000, 0x40000006) 06:12:21 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x900, 0x40000006) 06:12:21 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf002000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1968.525333][ C0] sd 0:0:1:0: tag#610 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.534286][ C0] sd 0:0:1:0: tag#610 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1968.543250][ C0] sd 0:0:1:0: tag#610 CDB[20]: 2d 06:12:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000007400000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1968.613006][ C1] sd 0:0:1:0: tag#591 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1968.622956][ C1] sd 0:0:1:0: tag#591 CDB: opcode=0xe5 (vendor) [ 1968.629206][ C1] sd 0:0:1:0: tag#591 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.634845][T18030] loop5: detected capacity change from 0 to 544 [ 1968.638172][ C1] sd 0:0:1:0: tag#591 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1968.653333][ C1] sd 0:0:1:0: tag#591 CDB[20]: 2d [ 1968.723746][ C1] sd 0:0:1:0: tag#594 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1968.733592][ C1] sd 0:0:1:0: tag#594 CDB: opcode=0xe5 (vendor) [ 1968.739830][ C1] sd 0:0:1:0: tag#594 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.748769][ C1] sd 0:0:1:0: tag#594 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1968.757719][ C1] sd 0:0:1:0: tag#594 CDB[20]: 2d [ 1968.772053][ C1] sd 0:0:1:0: tag#598 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1968.772127][ C0] sd 0:0:1:0: tag#599 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1968.781894][ C1] sd 0:0:1:0: tag#598 CDB: opcode=0xe5 (vendor) [ 1968.781912][ C1] sd 0:0:1:0: tag#598 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.791960][ C0] sd 0:0:1:0: tag#599 CDB: opcode=0xe5 (vendor) [ 1968.798193][ C1] sd 0:0:1:0: tag#598 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 06:12:21 executing program 2 (fault-call:11 fault-nth:43): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x26800, 0x40000006) 06:12:21 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xa00, 0x40000006) [ 1968.807131][ C0] sd 0:0:1:0: tag#599 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.813346][ C1] sd 0:0:1:0: tag#598 CDB[20]: 2d [ 1968.822266][ C0] sd 0:0:1:0: tag#599 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1968.845340][ C0] sd 0:0:1:0: tag#599 CDB[20]: 2d [ 1968.848294][T18029] loop4: detected capacity change from 0 to 224 [ 1968.883063][ C0] sd 0:0:1:0: tag#613 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1968.892831][ C0] sd 0:0:1:0: tag#613 CDB: opcode=0xe5 (vendor) [ 1968.899071][ C0] sd 0:0:1:0: tag#613 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.908063][ C0] sd 0:0:1:0: tag#613 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1968.917105][ C0] sd 0:0:1:0: tag#613 CDB[20]: 2d [ 1968.931847][T18044] FAULT_INJECTION: forcing a failure. [ 1968.931847][T18044] name failslab, interval 1, probability 0, space 0, times 0 [ 1968.944541][T18044] CPU: 0 PID: 18044 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1968.954342][T18044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.964388][T18044] Call Trace: [ 1968.967674][T18044] dump_stack_lvl+0xb7/0x103 [ 1968.972250][T18044] dump_stack+0x11/0x1a [ 1968.976561][T18044] should_fail+0x23c/0x250 [ 1968.981051][T18044] ? ext4_mb_new_blocks+0x70f/0x1f90 [ 1968.986330][T18044] __should_failslab+0x81/0x90 [ 1968.991076][T18044] should_failslab+0x5/0x20 [ 1968.995567][T18044] kmem_cache_alloc+0x46/0x2e0 [ 1969.000411][T18044] ext4_mb_new_blocks+0x70f/0x1f90 [ 1969.005644][T18044] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1969.011438][T18044] ? ext4_ext_search_right+0x2e3/0x540 [ 1969.016919][T18044] ext4_ext_map_blocks+0x1579/0x1f10 [ 1969.022209][T18044] ext4_map_blocks+0x70d/0xef0 [ 1969.026961][T18044] ? ext4_alloc_file_blocks+0x248/0x720 [ 1969.032606][T18044] ? __cond_resched+0x11/0x40 [ 1969.037268][T18044] ext4_alloc_file_blocks+0x271/0x720 [ 1969.042625][T18044] ext4_fallocate+0x2a7/0x4d0 [ 1969.047292][T18044] ? ext4_ext_truncate+0x170/0x170 [ 1969.052390][T18044] vfs_fallocate+0x459/0x6a0 [ 1969.056982][T18044] __x64_sys_fallocate+0x75/0xc0 [ 1969.062254][T18044] do_syscall_64+0x3d/0x90 [ 1969.066666][T18044] ? irqentry_exit+0xe/0x30 [ 1969.071152][T18044] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1969.077044][T18044] RIP: 0033:0x4665f9 [ 1969.081005][T18044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1969.100596][T18044] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1969.109076][T18044] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1969.117099][T18044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1969.125113][T18044] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 06:12:22 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x27000, 0x40000006) [ 1969.133224][T18044] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1969.141177][T18044] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 [ 1969.167170][T18030] loop5: detected capacity change from 0 to 544 06:12:22 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf032000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:22 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x40000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:22 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xb00, 0x40000006) [ 1969.178624][T18030] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:22 executing program 2 (fault-call:11 fault-nth:44): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000007a00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1969.244413][T18060] loop4: detected capacity change from 0 to 224 [ 1969.280278][T18073] loop5: detected capacity change from 0 to 544 06:12:22 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf102000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1969.306827][T18073] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1969.373202][T18079] loop4: detected capacity change from 0 to 224 [ 1969.382142][T18073] loop5: detected capacity change from 0 to 544 [ 1969.390063][T18073] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1969.431832][T18075] FAULT_INJECTION: forcing a failure. [ 1969.431832][T18075] name failslab, interval 1, probability 0, space 0, times 0 [ 1969.444577][T18075] CPU: 1 PID: 18075 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1969.454381][T18075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.464501][T18075] Call Trace: [ 1969.467769][T18075] dump_stack_lvl+0xb7/0x103 [ 1969.472352][T18075] dump_stack+0x11/0x1a [ 1969.476495][T18075] should_fail+0x23c/0x250 06:12:22 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf032100000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1969.480909][T18075] ? kcalloc+0x32/0x50 [ 1969.484974][T18075] __should_failslab+0x81/0x90 [ 1969.489723][T18075] should_failslab+0x5/0x20 [ 1969.494275][T18075] __kmalloc+0x66/0x340 [ 1969.498457][T18075] ? chksum_update+0x39/0x50 [ 1969.503048][T18075] kcalloc+0x32/0x50 [ 1969.506939][T18075] ext4_find_extent+0x21c/0x7f0 [ 1969.511810][T18075] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1969.517612][T18075] ext4_ext_map_blocks+0xd9/0x1f10 [ 1969.522713][T18075] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1969.528932][T18075] ? __down_write_common+0x42/0x810 [ 1969.534127][T18075] ? percpu_counter_add_batch+0x69/0xd0 [ 1969.539669][T18075] ? ext4_es_lookup_extent+0x36b/0x490 [ 1969.545147][T18075] ext4_map_blocks+0x70d/0xef0 [ 1969.549911][T18075] ? ext4_alloc_file_blocks+0x248/0x720 [ 1969.555434][T18075] ? __cond_resched+0x11/0x40 [ 1969.560089][T18075] ext4_alloc_file_blocks+0x271/0x720 [ 1969.565564][T18075] ext4_fallocate+0x2a7/0x4d0 [ 1969.570280][T18075] ? ext4_ext_truncate+0x170/0x170 [ 1969.575366][T18075] vfs_fallocate+0x459/0x6a0 [ 1969.579936][T18075] __x64_sys_fallocate+0x75/0xc0 [ 1969.584951][T18075] do_syscall_64+0x3d/0x90 [ 1969.589392][T18075] ? irqentry_exit+0xe/0x30 [ 1969.593873][T18075] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1969.599851][T18075] RIP: 0033:0x4665f9 [ 1969.603723][T18075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1969.623312][T18075] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d 06:12:22 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xc00, 0x40000006) 06:12:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000c0ed00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:22 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x27800, 0x40000006) [ 1969.631711][T18075] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1969.639675][T18075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1969.647624][T18075] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1969.655571][T18075] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1969.663531][T18075] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:22 executing program 2 (fault-call:11 fault-nth:45): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:22 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x48002, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1969.746172][T18113] loop5: detected capacity change from 0 to 544 [ 1969.751838][T18110] loop4: detected capacity change from 0 to 224 [ 1969.765002][T18113] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1969.797872][T18109] FAULT_INJECTION: forcing a failure. [ 1969.797872][T18109] name failslab, interval 1, probability 0, space 0, times 0 [ 1969.810926][T18109] CPU: 0 PID: 18109 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1969.820725][T18109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.830872][T18109] Call Trace: [ 1969.834163][T18109] dump_stack_lvl+0xb7/0x103 [ 1969.838746][T18109] dump_stack+0x11/0x1a [ 1969.842917][T18109] should_fail+0x23c/0x250 [ 1969.847335][T18109] ? kcalloc+0x32/0x50 [ 1969.851397][T18109] __should_failslab+0x81/0x90 [ 1969.856155][T18109] should_failslab+0x5/0x20 [ 1969.860787][T18109] __kmalloc+0x66/0x340 [ 1969.865009][T18109] ? chksum_update+0x39/0x50 [ 1969.869597][T18109] kcalloc+0x32/0x50 [ 1969.873483][T18109] ext4_find_extent+0x21c/0x7f0 [ 1969.878335][T18109] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1969.884500][T18109] ext4_ext_map_blocks+0xd9/0x1f10 [ 1969.889608][T18109] ? __ext4_handle_dirty_metadata+0x20c/0x590 [ 1969.895867][T18109] ? __ext4_update_other_inode_time+0x1b1/0x5c0 [ 1969.902179][T18109] ? __down_write_common+0x42/0x810 [ 1969.907376][T18109] ? percpu_counter_add_batch+0x69/0xd0 [ 1969.913019][T18109] ? ext4_es_lookup_extent+0x36b/0x490 [ 1969.918477][T18109] ext4_map_blocks+0x70d/0xef0 [ 1969.923459][T18109] ? ext4_alloc_file_blocks+0x248/0x720 [ 1969.929046][T18109] ? __cond_resched+0x11/0x40 [ 1969.933731][T18109] ext4_alloc_file_blocks+0x271/0x720 [ 1969.939153][T18109] ext4_fallocate+0x2a7/0x4d0 [ 1969.943828][T18109] ? ext4_ext_truncate+0x170/0x170 [ 1969.948938][T18109] vfs_fallocate+0x459/0x6a0 [ 1969.953570][T18109] __x64_sys_fallocate+0x75/0xc0 [ 1969.958535][T18109] do_syscall_64+0x3d/0x90 [ 1969.963095][T18109] ? irqentry_exit+0xe/0x30 [ 1969.967596][T18109] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1969.973496][T18109] RIP: 0033:0x4665f9 [ 1969.977372][T18109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:12:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x27c00, 0x40000006) 06:12:23 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf002200000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:23 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xd00, 0x40000006) [ 1969.997013][T18109] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1970.005519][T18109] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1970.013528][T18109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1970.021545][T18109] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1970.029511][T18109] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1970.037564][T18109] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:23 executing program 2 (fault-call:11 fault-nth:46): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x27cff, 0x40000006) 06:12:23 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x57800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1970.075023][T18113] loop5: detected capacity change from 0 to 544 [ 1970.084387][T18113] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1970.106604][T18140] loop4: detected capacity change from 0 to 224 06:12:23 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf002500000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f00000000000000000100000001f000000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1970.181209][T18143] FAULT_INJECTION: forcing a failure. [ 1970.181209][T18143] name failslab, interval 1, probability 0, space 0, times 0 [ 1970.193952][T18143] CPU: 0 PID: 18143 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1970.203747][T18143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1970.213792][T18143] Call Trace: [ 1970.217082][T18143] dump_stack_lvl+0xb7/0x103 [ 1970.219631][T18153] loop5: detected capacity change from 0 to 544 [ 1970.221820][T18143] dump_stack+0x11/0x1a [ 1970.232361][T18143] should_fail+0x23c/0x250 [ 1970.236783][T18143] ? kcalloc+0x32/0x50 [ 1970.240844][T18143] __should_failslab+0x81/0x90 [ 1970.245611][T18143] should_failslab+0x5/0x20 [ 1970.250102][T18143] __kmalloc+0x66/0x340 [ 1970.254250][T18143] ? chksum_update+0x39/0x50 [ 1970.258826][T18143] kcalloc+0x32/0x50 [ 1970.262711][T18143] ext4_find_extent+0x21c/0x7f0 [ 1970.267547][T18143] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 1970.273413][T18143] ext4_ext_map_blocks+0xd9/0x1f10 [ 1970.278538][T18143] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1970.284745][T18143] ? __down_write_common+0x42/0x810 [ 1970.290067][T18143] ? percpu_counter_add_batch+0x69/0xd0 [ 1970.295620][T18143] ? ext4_es_lookup_extent+0x36b/0x490 [ 1970.301073][T18143] ext4_map_blocks+0x70d/0xef0 [ 1970.305846][T18143] ? ext4_alloc_file_blocks+0x248/0x720 [ 1970.311440][T18143] ? __cond_resched+0x11/0x40 [ 1970.316105][T18143] ext4_alloc_file_blocks+0x271/0x720 [ 1970.321469][T18143] ext4_fallocate+0x2a7/0x4d0 [ 1970.326140][T18143] ? ext4_ext_truncate+0x170/0x170 [ 1970.331253][T18143] vfs_fallocate+0x459/0x6a0 [ 1970.335835][T18143] __x64_sys_fallocate+0x75/0xc0 [ 1970.340782][T18143] do_syscall_64+0x3d/0x90 [ 1970.345198][T18143] ? irqentry_exit+0xe/0x30 [ 1970.349694][T18143] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1970.355585][T18143] RIP: 0033:0x4665f9 [ 1970.359471][T18143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1970.379073][T18143] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1970.387478][T18143] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1970.395963][T18143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1970.403923][T18143] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1970.411900][T18143] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1970.419925][T18143] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x27d7e, 0x40000006) 06:12:23 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xe00, 0x40000006) 06:12:23 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf032e00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1970.440666][T18153] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1970.455323][T18165] loop4: detected capacity change from 0 to 224 06:12:23 executing program 2 (fault-call:11 fault-nth:47): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) [ 1970.502411][T18153] loop5: detected capacity change from 0 to 544 [ 1970.515141][T18153] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000fffe00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1970.553803][T18183] loop4: detected capacity change from 0 to 224 06:12:23 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf032f00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:23 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x5f000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x27d9d, 0x40000006) [ 1970.621755][T18192] loop5: detected capacity change from 0 to 544 [ 1970.654436][T18192] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1970.654952][T18189] FAULT_INJECTION: forcing a failure. [ 1970.654952][T18189] name failslab, interval 1, probability 0, space 0, times 0 [ 1970.677077][T18189] CPU: 1 PID: 18189 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 1970.686891][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1970.696956][T18189] Call Trace: [ 1970.700221][T18189] dump_stack_lvl+0xb7/0x103 [ 1970.704804][T18189] dump_stack+0x11/0x1a [ 1970.708956][T18189] should_fail+0x23c/0x250 [ 1970.713395][T18189] ? kcalloc+0x32/0x50 [ 1970.717468][T18189] __should_failslab+0x81/0x90 [ 1970.722260][T18189] should_failslab+0x5/0x20 [ 1970.726761][T18189] __kmalloc+0x66/0x340 [ 1970.731001][T18189] ? save_fpregs_to_fpstate+0xd8/0x110 [ 1970.736460][T18189] kcalloc+0x32/0x50 [ 1970.740401][T18189] ext4_find_extent+0x21c/0x7f0 [ 1970.745236][T18189] ext4_ext_map_blocks+0xd9/0x1f10 [ 1970.750343][T18189] ? __ext4_handle_dirty_metadata+0x20c/0x590 [ 1970.756428][T18189] ? __ext4_update_other_inode_time+0x1b1/0x5c0 [ 1970.762676][T18189] ? __down_write_common+0x42/0x810 [ 1970.767867][T18189] ? percpu_counter_add_batch+0x69/0xd0 [ 1970.773464][T18189] ? ext4_es_lookup_extent+0x36b/0x490 [ 1970.778981][T18189] ext4_map_blocks+0x70d/0xef0 [ 1970.783741][T18189] ? ext4_alloc_file_blocks+0x248/0x720 [ 1970.789283][T18189] ? __cond_resched+0x11/0x40 [ 1970.794070][T18189] ext4_alloc_file_blocks+0x271/0x720 [ 1970.799444][T18189] ext4_fallocate+0x2a7/0x4d0 [ 1970.804125][T18189] ? ext4_ext_truncate+0x170/0x170 [ 1970.809231][T18189] vfs_fallocate+0x459/0x6a0 [ 1970.813824][T18189] __x64_sys_fallocate+0x75/0xc0 [ 1970.818762][T18189] do_syscall_64+0x3d/0x90 [ 1970.823176][T18189] ? irqentry_exit+0xe/0x30 [ 1970.827753][T18189] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1970.833662][T18189] RIP: 0033:0x4665f9 [ 1970.837576][T18189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1970.857187][T18189] RSP: 002b:00007f6fb4e22188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1970.865580][T18189] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 1970.873535][T18189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1970.881541][T18189] RBP: 00007f6fb4e221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1970.889503][T18189] R10: 0000000040000006 R11: 0000000000000246 R12: 0000000000000002 [ 1970.897558][T18189] R13: 00007fff17f5ccef R14: 00007f6fb4e22300 R15: 0000000000022000 06:12:23 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xf00, 0x40000006) 06:12:24 executing program 2 (fault-call:11 fault-nth:48): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:24 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x27dac, 0x40000006) [ 1970.921303][T18212] loop4: detected capacity change from 0 to 224 [ 1970.941365][T18192] loop5: detected capacity change from 0 to 544 [ 1970.956269][T18192] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1970.966062][T18212] loop4: detected capacity change from 0 to 224 06:12:24 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf003f00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:24 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x66800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000fff00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:24 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x40000006) 06:12:24 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x1100, 0x40000006) [ 1971.077560][T18241] loop4: detected capacity change from 0 to 224 [ 1971.090128][T18244] loop5: detected capacity change from 0 to 544 06:12:24 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf004000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1971.120710][T18244] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1971.213107][T18244] loop5: detected capacity change from 0 to 544 [ 1971.232294][T18244] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1971.238173][T18264] loop4: detected capacity change from 0 to 224 06:12:24 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x27dad, 0x40000006) 06:12:24 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x2, 0x0, 0x40000006) 06:12:24 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf004800000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:24 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x1200, 0x40000006) 06:12:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000feff00000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1971.372679][T18285] loop5: detected capacity change from 0 to 544 [ 1971.376895][T18286] loop4: detected capacity change from 0 to 224 06:12:24 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf004c00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:24 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x3, 0x0, 0x40000006) [ 1971.424321][T18285] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:24 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x6e000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:24 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4, 0x0, 0x40000006) [ 1971.494620][T18285] loop5: detected capacity change from 0 to 544 [ 1971.505503][T18285] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1971.523652][T18309] loop4: detected capacity change from 0 to 224 06:12:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000002000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:24 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf096000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:24 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x5, 0x0, 0x40000006) [ 1971.628811][T18324] loop5: detected capacity change from 0 to 544 [ 1971.674714][T18324] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1971.686954][T18333] loop4: detected capacity change from 0 to 224 [ 1971.740131][T18324] loop5: detected capacity change from 0 to 544 [ 1971.766041][T18324] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:24 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x28000, 0x40000006) 06:12:24 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x6, 0x0, 0x40000006) 06:12:24 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x1800, 0x40000006) 06:12:24 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf096100000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:24 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7003b, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000004000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:24 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf006800000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1971.861490][T18366] loop4: detected capacity change from 0 to 224 06:12:24 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x7, 0x0, 0x40000006) [ 1971.914553][T18373] loop5: detected capacity change from 0 to 544 [ 1971.947795][T18376] loop4: detected capacity change from 0 to 224 [ 1971.957750][T18373] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:25 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x8, 0x0, 0x40000006) 06:12:25 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf006c00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1972.019046][T18373] loop5: detected capacity change from 0 to 544 [ 1972.038979][T18373] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000008000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:25 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x9, 0x0, 0x40000006) [ 1972.122251][T18401] loop4: detected capacity change from 0 to 224 [ 1972.170108][T18406] loop5: detected capacity change from 0 to 544 [ 1972.197201][T18406] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:25 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x29800, 0x40000006) 06:12:25 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7003c, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:25 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf007400000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:25 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xa, 0x0, 0x40000006) 06:12:25 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000, 0x40000006) 06:12:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000400008000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1972.256552][T18406] loop5: detected capacity change from 0 to 544 [ 1972.263810][T18406] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1972.299226][T18430] loop4: detected capacity change from 0 to 224 [ 1972.334788][T18440] loop5: detected capacity change from 0 to 544 06:12:25 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf007a00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:25 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xb, 0x0, 0x40000006) [ 1972.378621][T18440] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:25 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xc, 0x0, 0x40000006) [ 1972.454696][T18440] loop5: detected capacity change from 0 to 544 [ 1972.456553][T18458] loop4: detected capacity change from 0 to 224 [ 1972.461848][T18440] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:25 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf00cf00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:25 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xd, 0x0, 0x40000006) 06:12:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f00000000000000000100000000000c000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1972.612734][T18475] loop4: detected capacity change from 0 to 224 [ 1972.656171][T18483] loop5: detected capacity change from 0 to 544 [ 1972.678521][T18483] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:25 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2a000, 0x40000006) 06:12:25 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7022c, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:25 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xe, 0x0, 0x40000006) 06:12:25 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x3f00, 0x40000006) 06:12:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000040000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:25 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf00d100000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1972.743152][T18483] loop5: detected capacity change from 0 to 544 [ 1972.753769][T18483] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1972.807442][T18509] loop4: detected capacity change from 0 to 224 [ 1972.825562][T18520] loop5: detected capacity change from 0 to 544 06:12:25 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xf, 0x0, 0x40000006) 06:12:25 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf00de00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1972.863042][T18520] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:26 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x10, 0x0, 0x40000006) [ 1972.936956][T18520] loop5: detected capacity change from 0 to 544 [ 1972.946274][T18520] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1972.959808][T18537] loop4: detected capacity change from 0 to 224 06:12:26 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf00df00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000ffffe0000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1973.041536][ C0] scsi_io_completion_action: 72 callbacks suppressed [ 1973.041566][ C0] sd 0:0:1:0: tag#619 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1973.046283][ C1] sd 0:0:1:0: tag#623 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1973.048325][ C0] sd 0:0:1:0: tag#619 CDB: opcode=0xe5 (vendor) [ 1973.058109][ C1] sd 0:0:1:0: tag#623 CDB: opcode=0xe5 (vendor) [ 1973.067900][ C0] sd 0:0:1:0: tag#619 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 06:12:26 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x12, 0x0, 0x40000006) [ 1973.074500][ C1] sd 0:0:1:0: tag#623 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1973.080697][ C0] sd 0:0:1:0: tag#619 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1973.089624][ C1] sd 0:0:1:0: tag#623 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1973.098535][ C0] sd 0:0:1:0: tag#619 CDB[20]: 2d [ 1973.107454][ C1] sd 0:0:1:0: tag#623 CDB[20]: 2d [ 1973.129775][T18551] loop5: detected capacity change from 0 to 544 [ 1973.153007][ C1] sd 0:0:1:0: tag#625 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1973.162764][ C1] sd 0:0:1:0: tag#625 CDB: opcode=0xe5 (vendor) [ 1973.168996][ C1] sd 0:0:1:0: tag#625 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1973.177568][ C0] sd 0:0:1:0: tag#580 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1973.177931][ C1] sd 0:0:1:0: tag#625 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1973.187647][ C0] sd 0:0:1:0: tag#580 CDB: opcode=0xe5 (vendor) 06:12:26 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2e000, 0x40000006) [ 1973.196533][ C1] sd 0:0:1:0: tag#625 CDB[20]: 2d [ 1973.202756][ C0] sd 0:0:1:0: tag#580 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1973.216729][ C0] sd 0:0:1:0: tag#580 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1973.225710][ C0] sd 0:0:1:0: tag#580 CDB[20]: 2d [ 1973.247137][T18565] loop4: detected capacity change from 0 to 224 [ 1973.258357][ C0] sd 0:0:1:0: tag#586 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1973.268113][ C0] sd 0:0:1:0: tag#586 CDB: opcode=0xe5 (vendor) [ 1973.274372][ C0] sd 0:0:1:0: tag#586 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1973.283330][ C0] sd 0:0:1:0: tag#586 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1973.292302][ C0] sd 0:0:1:0: tag#586 CDB[20]: 2d [ 1973.292917][T18551] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1973.314025][ C0] sd 0:0:1:0: tag#593 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1973.323783][ C0] sd 0:0:1:0: tag#593 CDB: opcode=0xe5 (vendor) [ 1973.330042][ C0] sd 0:0:1:0: tag#593 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1973.339008][ C0] sd 0:0:1:0: tag#593 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1973.347979][ C0] sd 0:0:1:0: tag#593 CDB[20]: 2d 06:12:26 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7027c, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:26 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x4800, 0x40000006) 06:12:26 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x18, 0x0, 0x40000006) 06:12:26 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bfc0ed00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000010b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1973.382876][T18551] loop5: detected capacity change from 0 to 544 [ 1973.390731][T18551] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1973.437856][T18583] loop4: detected capacity change from 0 to 224 [ 1973.450911][ C1] sd 0:0:1:0: tag#601 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1973.460762][ C1] sd 0:0:1:0: tag#601 CDB: opcode=0xe5 (vendor) [ 1973.467022][ C1] sd 0:0:1:0: tag#601 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1973.476007][ C1] sd 0:0:1:0: tag#601 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1973.484985][ C1] sd 0:0:1:0: tag#601 CDB[20]: 2d [ 1973.495146][T18590] loop5: detected capacity change from 0 to 544 [ 1973.510732][ C0] sd 0:0:1:0: tag#603 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1973.520506][ C0] sd 0:0:1:0: tag#603 CDB: opcode=0xe5 (vendor) [ 1973.526765][ C0] sd 0:0:1:0: tag#603 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 06:12:26 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf07fc00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1973.535712][ C0] sd 0:0:1:0: tag#603 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1973.544660][ C0] sd 0:0:1:0: tag#603 CDB[20]: 2d 06:12:26 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffffe00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:26 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x28, 0x0, 0x40000006) [ 1973.610258][ C0] sd 0:0:1:0: tag#633 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1973.620279][ C0] sd 0:0:1:0: tag#633 CDB: opcode=0xe5 (vendor) [ 1973.626561][ C0] sd 0:0:1:0: tag#633 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1973.635689][ C0] sd 0:0:1:0: tag#633 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1973.644657][ C0] sd 0:0:1:0: tag#633 CDB[20]: 2d 06:12:26 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0fff00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:26 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x5000, 0x40000006) 06:12:26 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffeff00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:26 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2e800, 0x40000006) [ 1973.665253][ C0] sd 0:0:1:0: tag#577 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1973.675036][ C0] sd 0:0:1:0: tag#577 CDB: opcode=0xe5 (vendor) [ 1973.681285][ C0] sd 0:0:1:0: tag#577 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1973.689282][T18590] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1973.690504][ C0] sd 0:0:1:0: tag#577 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1973.690524][ C0] sd 0:0:1:0: tag#577 CDB[20]: 2d 06:12:26 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x704f6, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:26 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x30, 0x0, 0x40000006) [ 1973.752948][T18614] loop4: detected capacity change from 0 to 224 [ 1973.784189][T18590] loop5: detected capacity change from 0 to 544 06:12:26 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000004000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1973.817836][T18590] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:26 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x38, 0x0, 0x40000006) 06:12:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000020b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1973.882608][T18636] loop4: detected capacity change from 0 to 224 06:12:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000008000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x281, 0x0, 0x40000006) [ 1973.957187][T18649] loop5: detected capacity change from 0 to 544 [ 1973.969342][T18649] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:27 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x33800, 0x40000006) 06:12:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf00000c000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1974.016542][T18664] loop4: detected capacity change from 0 to 224 [ 1974.033929][T18649] loop5: detected capacity change from 0 to 544 [ 1974.054376][T18649] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1974.113687][T18677] loop4: detected capacity change from 0 to 224 06:12:27 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x5800, 0x40000006) 06:12:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x300, 0x0, 0x40000006) 06:12:27 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x70660, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000004020b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000010000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bfffff1f000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1974.200295][T18698] loop4: detected capacity change from 0 to 224 [ 1974.204232][T18693] loop5: detected capacity change from 0 to 544 06:12:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x486, 0x0, 0x40000006) [ 1974.258887][T18693] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:27 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x6000, 0x40000006) 06:12:27 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7086e, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x500, 0x0, 0x40000006) [ 1974.309852][T18713] loop4: detected capacity change from 0 to 224 [ 1974.325012][T18693] loop5: detected capacity change from 0 to 544 [ 1974.347134][T18693] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:27 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x40000, 0x40000006) 06:12:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bfffffe0000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000030b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x600, 0x0, 0x40000006) [ 1974.481030][T18744] loop4: detected capacity change from 0 to 224 [ 1974.494406][T18745] loop5: detected capacity change from 0 to 544 06:12:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000010000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1974.526914][T18745] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x700, 0x0, 0x40000006) 06:12:27 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x70879, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1974.600541][T18745] loop5: detected capacity change from 0 to 544 [ 1974.604567][T18759] loop4: detected capacity change from 0 to 224 [ 1974.620065][T18745] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000020000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x900, 0x0, 0x40000006) 06:12:27 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x6800, 0x40000006) 06:12:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xa00, 0x0, 0x40000006) 06:12:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000040b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:27 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x50700, 0x40000006) [ 1974.779625][T18790] loop4: detected capacity change from 0 to 224 06:12:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000004020000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:27 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7000, 0x40000006) 06:12:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xb00, 0x0, 0x40000006) [ 1974.850928][T18798] loop5: detected capacity change from 0 to 544 [ 1974.873080][T18808] loop4: detected capacity change from 0 to 224 06:12:28 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x704fc, 0x40000006) 06:12:28 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000030000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1974.925344][T18798] loop5: detected capacity change from 0 to 544 [ 1974.939368][T18808] loop4: detected capacity change from 0 to 224 [ 1974.942472][T18798] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:28 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x71074, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:28 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xc00, 0x0, 0x40000006) 06:12:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000050b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1975.050398][T18840] loop4: detected capacity change from 0 to 224 06:12:28 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000040000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:28 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xd00, 0x0, 0x40000006) [ 1975.128715][T18849] loop5: detected capacity change from 0 to 544 [ 1975.168777][T18849] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:28 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xe00, 0x0, 0x40000006) [ 1975.204999][T18864] loop4: detected capacity change from 0 to 224 06:12:28 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000050000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:28 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x71600, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1975.245316][T18849] loop5: detected capacity change from 0 to 544 [ 1975.282564][T18849] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:28 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xf00, 0x0, 0x40000006) 06:12:28 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7800, 0x40000006) [ 1975.322883][T18878] loop4: detected capacity change from 0 to 224 06:12:28 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x70500, 0x40000006) 06:12:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000060b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:28 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000060000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:28 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x1200, 0x0, 0x40000006) 06:12:28 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x71850, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1975.469835][T18905] loop5: detected capacity change from 0 to 544 [ 1975.491620][T18910] loop4: detected capacity change from 0 to 224 [ 1975.515458][T18905] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:28 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000004060000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:28 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x1800, 0x0, 0x40000006) [ 1975.613929][T18905] loop5: detected capacity change from 0 to 544 [ 1975.629689][T18905] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000004060b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:28 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x72069, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1975.663228][T18932] loop4: detected capacity change from 0 to 224 06:12:28 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x2000, 0x0, 0x40000006) 06:12:28 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000070000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1975.749085][T18946] loop5: detected capacity change from 0 to 544 [ 1975.757552][T18946] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:28 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x8102, 0x40000006) [ 1975.813453][T18961] loop4: detected capacity change from 0 to 224 06:12:29 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x77800, 0x40000006) 06:12:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000070b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:29 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x2800, 0x0, 0x40000006) 06:12:29 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000080000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:29 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x8203, 0x40000006) 06:12:29 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x72802, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:29 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000090000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1976.004050][T18984] loop4: detected capacity change from 0 to 224 [ 1976.043380][T18991] loop5: detected capacity change from 0 to 544 06:12:29 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x3000, 0x0, 0x40000006) [ 1976.075230][T18991] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1976.140720][T19005] loop4: detected capacity change from 0 to 224 [ 1976.169608][T18991] loop5: detected capacity change from 0 to 544 [ 1976.181186][T18991] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:29 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000000a0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:29 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x3800, 0x0, 0x40000006) 06:12:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000080b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:29 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x78000, 0x40000006) 06:12:29 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x3f00, 0x0, 0x40000006) [ 1976.320503][T19031] loop4: detected capacity change from 0 to 224 [ 1976.329022][T19032] loop5: detected capacity change from 0 to 544 06:12:29 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000000b0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:29 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x72a4a, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1976.362627][T19032] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:29 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x3f47, 0x0, 0x40000006) [ 1976.423344][T19032] loop5: detected capacity change from 0 to 544 [ 1976.438845][T19032] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1976.461809][T19059] loop4: detected capacity change from 0 to 224 06:12:29 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xff01, 0x40000006) 06:12:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000090b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:29 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000000c0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:29 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4567, 0x0, 0x40000006) 06:12:29 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x73005, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1976.600560][T19076] loop5: detected capacity change from 0 to 544 06:12:29 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4647, 0x0, 0x40000006) 06:12:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000000a0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1976.645042][T19076] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1976.648900][T19087] loop4: detected capacity change from 0 to 224 06:12:29 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x78800, 0x40000006) 06:12:29 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000000d0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:29 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x465f, 0x0, 0x40000006) [ 1976.758964][T19104] loop5: detected capacity change from 0 to 544 [ 1976.779456][T19104] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:29 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x79000, 0x40000006) 06:12:29 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4667, 0x0, 0x40000006) [ 1976.842128][T19118] loop4: detected capacity change from 0 to 224 [ 1976.854599][T19104] loop5: detected capacity change from 0 to 544 [ 1976.865294][T19104] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:30 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xff07, 0x40000006) 06:12:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000000b0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:30 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000000e0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x473f, 0x0, 0x40000006) 06:12:30 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7380b, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:30 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x79800, 0x40000006) [ 1977.087874][T19149] loop4: detected capacity change from 0 to 224 [ 1977.099999][T19152] loop5: detected capacity change from 0 to 544 06:12:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4746, 0x0, 0x40000006) 06:12:30 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000000f0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1977.143865][T19152] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4747, 0x0, 0x40000006) 06:12:30 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xff0f, 0x40000006) 06:12:30 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000100000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1977.244505][T19152] loop5: detected capacity change from 0 to 544 [ 1977.256769][T19178] loop4: detected capacity change from 0 to 224 [ 1977.263885][T19152] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x5f46, 0x0, 0x40000006) 06:12:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000000c0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:30 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x213cb, 0x40000006) 06:12:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x6745, 0x0, 0x40000006) 06:12:30 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000110000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1977.409347][T19206] loop4: detected capacity change from 0 to 224 [ 1977.422502][T19207] loop5: detected capacity change from 0 to 544 [ 1977.447708][T19207] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:30 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x74000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1977.523126][T19207] loop5: detected capacity change from 0 to 544 [ 1977.529995][T19207] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1977.555296][T19217] loop4: detected capacity change from 0 to 224 06:12:30 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7a000, 0x40000006) 06:12:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x6746, 0x0, 0x40000006) 06:12:30 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x32800, 0x40000006) 06:12:30 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000120000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000000d0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x8102, 0x0, 0x40000006) [ 1977.664938][T19247] loop4: detected capacity change from 0 to 224 [ 1977.665226][T19248] loop5: detected capacity change from 0 to 544 [ 1977.696041][T19248] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:30 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000180000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1977.763598][T19248] loop5: detected capacity change from 0 to 544 [ 1977.772430][T19248] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x8604, 0x0, 0x40000006) 06:12:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000000e0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:30 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x33000, 0x40000006) [ 1977.842854][T19273] loop4: detected capacity change from 0 to 224 06:12:30 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000190000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1977.900999][T19283] loop5: detected capacity change from 0 to 544 [ 1977.909696][T19283] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:31 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x74801, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1977.964707][T19283] loop5: detected capacity change from 0 to 544 [ 1977.982317][T19283] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1978.013444][T19302] loop4: detected capacity change from 0 to 224 06:12:31 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7b000, 0x40000006) 06:12:31 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xff01, 0x0, 0x40000006) 06:12:31 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000200000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000000f0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1978.159271][ C1] scsi_io_completion_action: 104 callbacks suppressed [ 1978.159302][ C1] sd 0:0:1:0: tag#599 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1978.172081][T19321] loop5: detected capacity change from 0 to 544 [ 1978.175814][ C1] sd 0:0:1:0: tag#599 CDB: opcode=0xe5 (vendor) [ 1978.184985][T19323] loop4: detected capacity change from 0 to 224 [ 1978.188261][ C1] sd 0:0:1:0: tag#599 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1978.188279][ C1] sd 0:0:1:0: tag#599 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1978.188298][ C1] sd 0:0:1:0: tag#599 CDB[20]: 2d [ 1978.218166][T19321] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1978.241500][ C0] sd 0:0:1:0: tag#623 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1978.251264][ C0] sd 0:0:1:0: tag#623 CDB: opcode=0xe5 (vendor) 06:12:31 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x75000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:31 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xff07, 0x0, 0x40000006) 06:12:31 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000003200000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1978.257529][ C0] sd 0:0:1:0: tag#623 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1978.266592][ C0] sd 0:0:1:0: tag#623 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1978.275543][ C0] sd 0:0:1:0: tag#623 CDB[20]: 2d 06:12:31 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7b800, 0x40000006) [ 1978.363389][ C0] sd 0:0:1:0: tag#587 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1978.373170][ C0] sd 0:0:1:0: tag#587 CDB: opcode=0xe5 (vendor) [ 1978.379438][ C0] sd 0:0:1:0: tag#587 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1978.383322][ C1] sd 0:0:1:0: tag#595 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1978.388508][ C0] sd 0:0:1:0: tag#587 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1978.398201][ C1] sd 0:0:1:0: tag#595 CDB: opcode=0xe5 (vendor) 06:12:31 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000010200000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1978.407116][ C0] sd 0:0:1:0: tag#587 CDB[20]: 2d [ 1978.413341][ C1] sd 0:0:1:0: tag#595 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1978.427697][ C1] sd 0:0:1:0: tag#595 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1978.436652][ C1] sd 0:0:1:0: tag#595 CDB[20]: 2d [ 1978.480613][ C1] sd 0:0:1:0: tag#598 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1978.490364][ C1] sd 0:0:1:0: tag#598 CDB: opcode=0xe5 (vendor) [ 1978.496634][ C1] sd 0:0:1:0: tag#598 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1978.505573][ C1] sd 0:0:1:0: tag#598 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1978.514512][ C1] sd 0:0:1:0: tag#598 CDB[20]: 2d 06:12:31 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x34800, 0x40000006) [ 1978.525546][ C1] sd 0:0:1:0: tag#601 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1978.535337][ C1] sd 0:0:1:0: tag#601 CDB: opcode=0xe5 (vendor) [ 1978.541571][ C1] sd 0:0:1:0: tag#601 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1978.550530][ C1] sd 0:0:1:0: tag#601 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1978.559471][ C1] sd 0:0:1:0: tag#601 CDB[20]: 2d 06:12:31 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xff0f, 0x0, 0x40000006) [ 1978.582623][T19321] loop5: detected capacity change from 0 to 544 [ 1978.589040][T19348] loop4: detected capacity change from 0 to 224 [ 1978.621698][T19321] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:31 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7c800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1978.635465][ C0] sd 0:0:1:0: tag#610 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1978.645233][ C0] sd 0:0:1:0: tag#610 CDB: opcode=0xe5 (vendor) [ 1978.651464][ C0] sd 0:0:1:0: tag#610 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1978.660411][ C0] sd 0:0:1:0: tag#610 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1978.669373][ C0] sd 0:0:1:0: tag#610 CDB[20]: 2d [ 1978.683018][ C0] sd 0:0:1:0: tag#620 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1978.692775][ C0] sd 0:0:1:0: tag#620 CDB: opcode=0xe5 (vendor) [ 1978.699020][ C0] sd 0:0:1:0: tag#620 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1978.707975][ C0] sd 0:0:1:0: tag#620 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1978.716968][ C0] sd 0:0:1:0: tag#620 CDB[20]: 2d [ 1978.722201][ C0] sd 0:0:1:0: tag#621 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 06:12:31 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000003210000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1978.731923][ C0] sd 0:0:1:0: tag#621 CDB: opcode=0xe5 (vendor) [ 1978.738198][ C0] sd 0:0:1:0: tag#621 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1978.747163][ C0] sd 0:0:1:0: tag#621 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1978.756113][ C0] sd 0:0:1:0: tag#621 CDB[20]: 2d [ 1978.774788][ C1] sd 0:0:1:0: tag#625 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 06:12:31 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x21438, 0x0, 0x40000006) 06:12:31 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7c000, 0x40000006) [ 1978.784557][ C1] sd 0:0:1:0: tag#625 CDB: opcode=0xe5 (vendor) [ 1978.790801][ C1] sd 0:0:1:0: tag#625 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1978.799778][ C1] sd 0:0:1:0: tag#625 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1978.808727][ C1] sd 0:0:1:0: tag#625 CDB[20]: 2d 06:12:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000020f0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:31 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x46000, 0x0, 0x40000006) 06:12:31 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7f000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1978.948396][T19391] loop5: detected capacity change from 0 to 544 [ 1978.961651][T19396] loop4: detected capacity change from 0 to 224 06:12:32 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000220000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1978.994664][T19391] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:32 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x46800, 0x0, 0x40000006) 06:12:32 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x35000, 0x40000006) 06:12:32 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4d000, 0x0, 0x40000006) 06:12:32 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7f800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1979.082616][T19410] loop4: detected capacity change from 0 to 224 [ 1979.100338][T19391] loop5: detected capacity change from 0 to 544 06:12:32 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000250000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1979.130670][T19391] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000100b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:32 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4d800, 0x0, 0x40000006) 06:12:32 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7c800, 0x40000006) 06:12:32 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4e000, 0x0, 0x40000006) 06:12:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000001100b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1979.251692][T19440] loop4: detected capacity change from 0 to 224 [ 1979.259651][T19441] loop5: detected capacity change from 0 to 544 [ 1979.273680][T19441] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:32 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:32 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000032e0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:32 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4e800, 0x0, 0x40000006) [ 1979.376290][T19463] loop5: detected capacity change from 0 to 544 [ 1979.413667][T19474] loop4: detected capacity change from 0 to 224 [ 1979.423630][T19463] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1979.522967][T19463] loop5: detected capacity change from 0 to 544 [ 1979.530861][T19463] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:32 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x38800, 0x40000006) 06:12:32 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000032f0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:32 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4f000, 0x0, 0x40000006) 06:12:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000004100b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:32 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x81600, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:32 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7e000, 0x40000006) 06:12:32 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000003f0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:32 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4f800, 0x0, 0x40000006) [ 1979.708429][T19503] loop4: detected capacity change from 0 to 224 [ 1979.732918][T19513] loop5: detected capacity change from 0 to 544 [ 1979.789516][T19513] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1979.803472][T19522] loop4: detected capacity change from 0 to 224 06:12:32 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000400000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:32 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x51800, 0x0, 0x40000006) 06:12:32 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x39000, 0x40000006) 06:12:33 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7e800, 0x40000006) 06:12:33 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x52000, 0x0, 0x40000006) 06:12:33 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000480000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1979.901650][T19513] loop5: detected capacity change from 0 to 544 [ 1979.918109][T19531] loop4: detected capacity change from 0 to 224 [ 1979.932587][T19513] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000110b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:33 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000004c0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1980.023093][T19560] loop4: detected capacity change from 0 to 224 06:12:33 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xc0000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:33 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x5f800, 0x0, 0x40000006) [ 1980.075755][T19568] loop5: detected capacity change from 0 to 544 [ 1980.129790][T19568] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1980.133651][T19573] loop4: detected capacity change from 0 to 224 06:12:33 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000009600000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:33 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x60000, 0x0, 0x40000006) [ 1980.210291][T19568] loop5: detected capacity change from 0 to 544 [ 1980.232888][T19568] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1980.253444][T19592] loop4: detected capacity change from 0 to 224 06:12:33 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000009610000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000120b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:33 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x3a000, 0x40000006) [ 1980.361233][T19607] loop5: detected capacity change from 0 to 544 [ 1980.404792][T19607] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1980.420986][T19618] loop4: detected capacity change from 0 to 224 [ 1980.440551][T19607] loop5: detected capacity change from 0 to 544 06:12:33 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7f5a4, 0x40000006) 06:12:33 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x67000, 0x0, 0x40000006) 06:12:33 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xc0200, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:33 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000680000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1980.450689][T19607] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:33 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x67800, 0x0, 0x40000006) 06:12:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000002180b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1980.542795][T19643] loop4: detected capacity change from 0 to 224 06:12:33 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000006c0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1980.623886][T19652] loop5: detected capacity change from 0 to 544 [ 1980.658968][T19652] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:33 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x6b800, 0x0, 0x40000006) [ 1980.678492][T19663] loop4: detected capacity change from 0 to 224 06:12:33 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000740000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:33 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xe0000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1980.721820][T19652] loop5: detected capacity change from 0 to 544 [ 1980.737679][T19652] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000200b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:33 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x3a800, 0x40000006) [ 1980.835301][T19686] loop5: detected capacity change from 0 to 544 [ 1980.851422][T19689] loop4: detected capacity change from 0 to 224 [ 1980.868241][T19686] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:34 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7f9a0, 0x40000006) 06:12:34 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x6c000, 0x0, 0x40000006) 06:12:34 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000007a0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000002200b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:34 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xe0200, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:34 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x6d000, 0x0, 0x40000006) [ 1980.993526][T19710] loop5: detected capacity change from 0 to 544 [ 1981.002712][T19711] loop4: detected capacity change from 0 to 224 06:12:34 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bfffffff850000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1981.052070][T19710] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:34 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x6d800, 0x0, 0x40000006) 06:12:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000010200b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1981.155996][T19710] loop5: detected capacity change from 0 to 544 [ 1981.162718][T19731] loop4: detected capacity change from 0 to 224 [ 1981.170667][T19710] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:34 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bfffffff8c0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:34 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffff, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1981.279939][T19750] loop5: detected capacity change from 0 to 544 [ 1981.307712][T19750] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1981.322789][T19759] loop4: detected capacity change from 0 to 224 06:12:34 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x3d000, 0x40000006) 06:12:34 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x7003b, 0x0, 0x40000006) 06:12:34 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf0000edc00000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:34 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x100000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:34 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x80000, 0x40000006) [ 1981.363408][T19750] loop5: detected capacity change from 0 to 544 [ 1981.374507][T19750] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000220b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:34 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x7003c, 0x0, 0x40000006) [ 1981.499177][T19794] loop5: detected capacity change from 0 to 544 [ 1981.506123][T19796] loop4: detected capacity change from 0 to 224 06:12:34 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000cf0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:34 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x74801, 0x0, 0x40000006) [ 1981.557429][T19794] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:34 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x180000, 0x40000006) [ 1981.644723][T19794] loop5: detected capacity change from 0 to 544 [ 1981.646807][T19815] loop4: detected capacity change from 0 to 224 [ 1981.666939][T19794] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:34 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000d10000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:34 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x75000, 0x0, 0x40000006) [ 1981.809453][T19834] loop4: detected capacity change from 0 to 224 06:12:34 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x3d800, 0x40000006) 06:12:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000250b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:34 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bfffffffda0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:34 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x77800, 0x0, 0x40000006) 06:12:34 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x180200, 0x40000006) 06:12:34 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x101600, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1981.951867][T19857] loop5: detected capacity change from 0 to 544 [ 1981.955536][T19858] loop4: detected capacity change from 0 to 224 [ 1981.982587][T19857] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000de0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:35 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x78000, 0x0, 0x40000006) [ 1982.063177][T19857] loop5: detected capacity change from 0 to 544 [ 1982.082519][T19857] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:35 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x80000, 0x0, 0x40000006) 06:12:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000df0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1982.131725][T19883] loop4: detected capacity change from 0 to 224 06:12:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000002e0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:35 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x200000, 0x40000006) [ 1982.220813][T19899] loop4: detected capacity change from 0 to 224 [ 1982.235966][T19903] loop5: detected capacity change from 0 to 544 [ 1982.266165][T19903] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:35 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x3f800, 0x40000006) 06:12:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffffffff00000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:35 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x100000, 0x0, 0x40000006) 06:12:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000003f0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:35 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x10d000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1982.325902][T19903] loop5: detected capacity change from 0 to 544 [ 1982.343088][T19903] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1982.410026][T19926] loop4: detected capacity change from 0 to 224 06:12:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffffffff60000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:35 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x180000, 0x0, 0x40000006) [ 1982.466803][T19936] loop5: detected capacity change from 0 to 544 [ 1982.496194][T19936] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffffffdf90000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:35 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x120000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1982.549770][T19948] loop4: detected capacity change from 0 to 224 [ 1982.570805][T19936] loop5: detected capacity change from 0 to 544 [ 1982.583271][T19936] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:35 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x180500, 0x0, 0x40000006) 06:12:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000400b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1982.649423][T19965] loop4: detected capacity change from 0 to 224 06:12:35 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x200200, 0x40000006) [ 1982.711874][T19978] loop5: detected capacity change from 0 to 544 [ 1982.747438][T19978] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:35 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x120200, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000007fc0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:35 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x40000, 0x40000006) 06:12:35 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x200000, 0x0, 0x40000006) [ 1982.799547][T19978] loop5: detected capacity change from 0 to 544 [ 1982.818903][T19978] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1982.837598][T20002] loop4: detected capacity change from 0 to 224 06:12:35 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x200500, 0x0, 0x40000006) 06:12:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffffffdfd0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000800400b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:36 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x280000, 0x0, 0x40000006) [ 1982.945619][T20022] loop5: detected capacity change from 0 to 544 [ 1982.958149][T20020] loop4: detected capacity change from 0 to 224 06:12:36 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffffffffe0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:36 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x133000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1983.007479][T20022] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:36 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf00000fff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1983.073354][T20022] loop5: detected capacity change from 0 to 544 [ 1983.075966][T20040] loop4: detected capacity change from 0 to 224 [ 1983.095145][T20022] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:36 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x280200, 0x40000006) 06:12:36 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x300000, 0x0, 0x40000006) 06:12:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000e6c167400b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1983.202729][T20064] loop4: detected capacity change from 0 to 224 [ 1983.254008][ C1] scsi_io_completion_action: 89 callbacks suppressed [ 1983.254038][ C1] sd 0:0:1:0: tag#609 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.255329][T20073] loop5: detected capacity change from 0 to 544 [ 1983.260762][ C1] sd 0:0:1:0: tag#609 CDB: opcode=0xe5 (vendor) [ 1983.275938][ C0] sd 0:0:1:0: tag#610 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.276786][ C1] sd 0:0:1:0: tag#609 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1983.283006][ C0] sd 0:0:1:0: tag#610 CDB: opcode=0xe5 (vendor) [ 1983.292694][ C1] sd 0:0:1:0: tag#609 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1983.301602][ C0] sd 0:0:1:0: tag#610 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1983.307835][ C1] sd 0:0:1:0: tag#609 CDB[20]: 2d [ 1983.316745][ C0] sd 0:0:1:0: tag#610 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1983.339628][ C0] sd 0:0:1:0: tag#610 CDB[20]: 2d 06:12:36 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x40800, 0x40000006) 06:12:36 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x13a800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:36 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffffff7ff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1983.351435][T20073] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1983.363046][ C0] sd 0:0:1:0: tag#620 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.372810][ C0] sd 0:0:1:0: tag#620 CDB: opcode=0xe5 (vendor) [ 1983.379053][ C0] sd 0:0:1:0: tag#620 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1983.388036][ C0] sd 0:0:1:0: tag#620 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1983.396994][ C0] sd 0:0:1:0: tag#620 CDB[20]: 2d 06:12:36 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x380000, 0x0, 0x40000006) [ 1983.440520][ C0] sd 0:0:1:0: tag#578 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.450278][ C0] sd 0:0:1:0: tag#578 CDB: opcode=0xe5 (vendor) [ 1983.456567][ C0] sd 0:0:1:0: tag#578 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1983.465527][ C0] sd 0:0:1:0: tag#578 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1983.474478][ C0] sd 0:0:1:0: tag#578 CDB[20]: 2d [ 1983.503352][ C1] sd 0:0:1:0: tag#603 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.513127][ C1] sd 0:0:1:0: tag#603 CDB: opcode=0xe5 (vendor) [ 1983.519362][ C1] sd 0:0:1:0: tag#603 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1983.528314][ C1] sd 0:0:1:0: tag#603 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1983.537431][ C1] sd 0:0:1:0: tag#603 CDB[20]: 2d 06:12:36 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x49000, 0x40000006) 06:12:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000440b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1983.567463][ C0] sd 0:0:1:0: tag#605 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.577233][ C0] sd 0:0:1:0: tag#605 CDB: opcode=0xe5 (vendor) [ 1983.583529][ C0] sd 0:0:1:0: tag#605 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1983.592585][ C0] sd 0:0:1:0: tag#605 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1983.601516][ C0] sd 0:0:1:0: tag#605 CDB[20]: 2d 06:12:36 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x500700, 0x0, 0x40000006) [ 1983.629337][T20104] loop4: detected capacity change from 0 to 224 [ 1983.658233][T20112] loop5: detected capacity change from 0 to 544 06:12:36 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffffffbff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1983.686333][T20112] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1983.687978][ C0] sd 0:0:1:0: tag#630 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.705992][ C0] sd 0:0:1:0: tag#630 CDB: opcode=0xe5 (vendor) [ 1983.712255][ C0] sd 0:0:1:0: tag#630 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1983.721209][ C0] sd 0:0:1:0: tag#630 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1983.730181][ C0] sd 0:0:1:0: tag#630 CDB[20]: 2d [ 1983.735259][ C0] sd 0:0:1:0: tag#637 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.745079][ C0] sd 0:0:1:0: tag#637 CDB: opcode=0xe5 (vendor) [ 1983.751318][ C0] sd 0:0:1:0: tag#637 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1983.760278][ C0] sd 0:0:1:0: tag#637 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1983.769861][ C0] sd 0:0:1:0: tag#637 CDB[20]: 2d 06:12:36 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x380300, 0x40000006) [ 1983.785170][ C0] sd 0:0:1:0: tag#589 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.795120][ C0] sd 0:0:1:0: tag#589 CDB: opcode=0xe5 (vendor) [ 1983.801351][ C0] sd 0:0:1:0: tag#589 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1983.810300][ C0] sd 0:0:1:0: tag#589 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1983.819960][ C0] sd 0:0:1:0: tag#589 CDB[20]: 2d 06:12:36 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x600400, 0x0, 0x40000006) 06:12:36 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x142000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1983.859839][T20128] loop4: detected capacity change from 0 to 224 [ 1983.860174][T20112] loop5: detected capacity change from 0 to 544 06:12:37 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x680400, 0x0, 0x40000006) [ 1983.903032][ C0] sd 0:0:1:0: tag#594 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.912961][ C0] sd 0:0:1:0: tag#594 CDB: opcode=0xe5 (vendor) [ 1983.919210][ C0] sd 0:0:1:0: tag#594 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1983.928173][ C0] sd 0:0:1:0: tag#594 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1983.937124][ C0] sd 0:0:1:0: tag#594 CDB[20]: 2d 06:12:37 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf001fffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000480b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1983.951654][T20112] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:37 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x600000, 0x40000006) 06:12:37 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x700600, 0x0, 0x40000006) [ 1984.074217][T20157] loop4: detected capacity change from 0 to 224 [ 1984.105417][T20169] loop5: detected capacity change from 0 to 544 06:12:37 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x49800, 0x40000006) 06:12:37 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x780600, 0x0, 0x40000006) 06:12:37 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x149800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:37 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x600200, 0x40000006) 06:12:37 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf00e0ffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1984.130769][T20169] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:37 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x780700, 0x0, 0x40000006) [ 1984.216317][T20169] loop5: detected capacity change from 0 to 544 [ 1984.234321][T20169] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1984.251006][T20190] loop4: detected capacity change from 0 to 224 06:12:37 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffff7ffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000004c0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:37 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x800000, 0x0, 0x40000006) 06:12:37 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x4a000, 0x40000006) 06:12:37 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x14b800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:37 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x800700, 0x0, 0x40000006) [ 1984.395589][T20212] loop5: detected capacity change from 0 to 544 [ 1984.403399][T20214] loop4: detected capacity change from 0 to 224 [ 1984.422270][T20212] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:37 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffffbffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:37 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xb80600, 0x0, 0x40000006) [ 1984.472277][T20214] loop4: detected capacity change from 0 to 224 [ 1984.482277][T20212] loop5: detected capacity change from 0 to 544 [ 1984.505278][T20212] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f00000000000000000100000000001a500b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1984.573248][T20243] loop4: detected capacity change from 0 to 224 [ 1984.593395][T20254] loop5: detected capacity change from 0 to 544 [ 1984.641386][T20254] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1984.663706][T19162] ================================================================== [ 1984.671778][T19162] BUG: KCSAN: data-race in mb_mark_used / mb_update_avg_fragment_size [ 1984.680017][T19162] [ 1984.682421][T19162] write to 0xffff8881018ce858 of 4 bytes by task 20181 on cpu 0: [ 1984.690118][T19162] mb_mark_used+0x2f2/0xc50 [ 1984.694607][T19162] ext4_mb_use_best_found+0x102/0x320 [ 1984.699963][T19162] ext4_mb_complex_scan_group+0x55d/0x850 [ 1984.705676][T19162] ext4_mb_regular_allocator+0x1a22/0x2520 [ 1984.711471][T19162] ext4_mb_new_blocks+0x762/0x1f90 [ 1984.716566][T19162] ext4_ext_map_blocks+0x1579/0x1f10 [ 1984.721832][T19162] ext4_map_blocks+0x70d/0xef0 [ 1984.726578][T19162] ext4_alloc_file_blocks+0x271/0x720 [ 1984.731929][T19162] ext4_fallocate+0x2a7/0x4d0 [ 1984.736603][T19162] vfs_fallocate+0x459/0x6a0 [ 1984.741172][T19162] __x64_sys_fallocate+0x75/0xc0 [ 1984.746088][T19162] do_syscall_64+0x3d/0x90 [ 1984.750518][T19162] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1984.756395][T19162] [ 1984.758705][T19162] read to 0xffff8881018ce858 of 4 bytes by task 19162 on cpu 1: [ 1984.766310][T19162] mb_update_avg_fragment_size+0x161/0x260 [ 1984.773160][T19162] mb_free_blocks+0x9e4/0xb40 [ 1984.777817][T19162] ext4_free_blocks+0x1448/0x1b80 [ 1984.782820][T19162] ext4_remove_blocks+0x61a/0x800 [ 1984.787908][T19162] ext4_ext_rm_leaf+0x684/0xd40 [ 1984.793083][T19162] ext4_ext_remove_space+0x8d6/0x1290 [ 1984.798437][T19162] ext4_ext_truncate+0xfe/0x170 [ 1984.803269][T19162] ext4_truncate+0x76e/0xa80 [ 1984.807844][T19162] ext4_evict_inode+0xa54/0xdb0 [ 1984.812679][T19162] evict+0x1c8/0x3c0 [ 1984.816558][T19162] iput+0x430/0x580 [ 1984.820352][T19162] dentry_unlink_inode+0x273/0x290 [ 1984.825456][T19162] d_delete+0x78/0xe0 [ 1984.829418][T19162] vfs_rmdir+0x2e6/0x300 [ 1984.833646][T19162] do_rmdir+0x15d/0x310 [ 1984.837785][T19162] __x64_sys_rmdir+0x2c/0x30 [ 1984.842360][T19162] do_syscall_64+0x3d/0x90 [ 1984.846759][T19162] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1984.852640][T19162] [ 1984.854960][T19162] value changed: 0x0000000e -> 0x0000000d [ 1984.860664][T19162] [ 1984.862966][T19162] Reported by Kernel Concurrency Sanitizer on: [ 1984.869090][T19162] CPU: 1 PID: 19162 Comm: syz-executor.3 Tainted: G W 5.14.0-syzkaller #0 [ 1984.878870][T19162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.888904][T19162] ================================================================== 06:12:37 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x680000, 0x40000006) 06:12:37 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bff9fdffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:37 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xc00600, 0x0, 0x40000006) 06:12:37 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x14c000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1984.953740][T20254] loop5: detected capacity change from 0 to 544 [ 1984.960554][T20271] loop4: detected capacity change from 0 to 224 [ 1984.974655][T20254] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000600b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:38 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xd00400, 0x0, 0x40000006) 06:12:38 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x4a800, 0x40000006) 06:12:38 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffdfdffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:38 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x153800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1985.339281][T20286] loop5: detected capacity change from 0 to 544 [ 1985.362615][T20286] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1985.402306][T20298] loop4: detected capacity change from 0 to 224 [ 1985.415711][T20286] loop5: detected capacity change from 0 to 544 [ 1985.424547][T20286] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:38 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf7fffffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000680b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1985.557791][T20317] loop5: detected capacity change from 0 to 544 [ 1985.586285][T20324] loop4: detected capacity change from 0 to 224 06:12:38 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x156000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1985.608623][T20317] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1985.729417][T20317] loop5: detected capacity change from 0 to 544 [ 1985.740653][T20317] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:38 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x680200, 0x40000006) 06:12:38 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf85ffffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:38 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x4d800, 0x40000006) 06:12:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000006c0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1985.889822][T20356] loop5: detected capacity change from 0 to 544 [ 1985.894596][T20354] loop4: detected capacity change from 0 to 224 [ 1985.913861][T20356] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:39 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15b800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1985.976849][T20356] loop5: detected capacity change from 0 to 544 [ 1985.997688][T20356] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1987.404394][T20383] cgroup: Unknown subsys name 'perf_event' [ 1987.410384][T20383] cgroup: Unknown subsys name 'net_cls' 06:12:41 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xd00600, 0x0, 0x40000006) 06:12:41 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf8cffffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000740b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:41 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x700000, 0x40000006) 06:12:41 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15bfff, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:41 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x4e000, 0x40000006) [ 1988.529008][ C1] scsi_io_completion_action: 32 callbacks suppressed [ 1988.529027][ C1] sd 0:0:1:0: tag#595 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1988.546167][ C1] sd 0:0:1:0: tag#595 CDB: opcode=0xe5 (vendor) [ 1988.552423][ C1] sd 0:0:1:0: tag#595 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1988.561346][ C1] sd 0:0:1:0: tag#595 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1988.570288][ C1] sd 0:0:1:0: tag#595 CDB[20]: 2d [ 1988.611885][ C1] sd 0:0:1:0: tag#605 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1988.621858][ C1] sd 0:0:1:0: tag#605 CDB: opcode=0xe5 (vendor) [ 1988.628126][ C1] sd 0:0:1:0: tag#605 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1988.637077][ C1] sd 0:0:1:0: tag#605 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1988.646029][ C1] sd 0:0:1:0: tag#605 CDB[20]: 2d [ 1988.664395][T20850] loop5: detected capacity change from 0 to 544 [ 1988.666272][T20849] loop4: detected capacity change from 0 to 224 [ 1988.678538][ C0] sd 0:0:1:0: tag#621 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1988.688311][ C0] sd 0:0:1:0: tag#621 CDB: opcode=0xe5 (vendor) [ 1988.694577][ C0] sd 0:0:1:0: tag#621 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1988.703656][ C0] sd 0:0:1:0: tag#621 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1988.712609][ C0] sd 0:0:1:0: tag#621 CDB[20]: 2d [ 1988.721799][ C1] sd 0:0:1:0: tag#633 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1988.731599][ C1] sd 0:0:1:0: tag#633 CDB: opcode=0xe5 (vendor) [ 1988.737868][ C1] sd 0:0:1:0: tag#633 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1988.746818][ C1] sd 0:0:1:0: tag#633 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1988.754562][T20850] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1988.755764][ C1] sd 0:0:1:0: tag#633 CDB[20]: 2d [ 1988.782439][ C0] sd 0:0:1:0: tag#638 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1988.792236][ C0] sd 0:0:1:0: tag#638 CDB: opcode=0xe5 (vendor) [ 1988.798493][ C0] sd 0:0:1:0: tag#638 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 06:12:41 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xd80400, 0x0, 0x40000006) [ 1988.798512][ C0] sd 0:0:1:0: tag#638 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1988.798530][ C0] sd 0:0:1:0: tag#638 CDB[20]: 2d [ 1988.813085][ C1] sd 0:0:1:0: tag#578 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1988.831123][ C1] sd 0:0:1:0: tag#578 CDB: opcode=0xe5 (vendor) [ 1988.837366][ C1] sd 0:0:1:0: tag#578 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1988.846303][ C1] sd 0:0:1:0: tag#578 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1988.855347][ C1] sd 0:0:1:0: tag#578 CDB[20]: 2d 06:12:41 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x700200, 0x40000006) 06:12:41 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bfdaffffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1988.883156][ C1] sd 0:0:1:0: tag#585 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1988.893631][ C1] sd 0:0:1:0: tag#585 CDB: opcode=0xe5 (vendor) [ 1988.899877][ C1] sd 0:0:1:0: tag#585 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1988.909045][ C1] sd 0:0:1:0: tag#585 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1988.918125][ C1] sd 0:0:1:0: tag#585 CDB[20]: 2d 06:12:42 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x54000, 0x40000006) [ 1988.933082][T20850] loop5: detected capacity change from 0 to 544 [ 1988.943434][ C1] sd 0:0:1:0: tag#611 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1988.953191][ C1] sd 0:0:1:0: tag#611 CDB: opcode=0xe5 (vendor) [ 1988.959433][ C1] sd 0:0:1:0: tag#611 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1988.968390][ C1] sd 0:0:1:0: tag#611 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1988.977362][ C1] sd 0:0:1:0: tag#611 CDB[20]: 2d [ 1988.988257][T20850] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1988.989084][ C1] sd 0:0:1:0: tag#612 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1989.008121][ C1] sd 0:0:1:0: tag#612 CDB: opcode=0xe5 (vendor) [ 1989.014476][ C1] sd 0:0:1:0: tag#612 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1989.023427][ C1] sd 0:0:1:0: tag#612 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1989.032492][ C1] sd 0:0:1:0: tag#612 CDB[20]: 2d 06:12:42 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15c000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000007a0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:42 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xd80600, 0x0, 0x40000006) [ 1989.054922][ C1] sd 0:0:1:0: tag#622 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1989.064698][ C1] sd 0:0:1:0: tag#622 CDB: opcode=0xe5 (vendor) [ 1989.070943][ C1] sd 0:0:1:0: tag#622 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1989.080459][ C1] sd 0:0:1:0: tag#622 CDB[10]: 92 1b da 40 b8 58 5b e0 a8 d4 7d 34 f3 90 4c f1 [ 1989.089504][ C1] sd 0:0:1:0: tag#622 CDB[20]: 2d [ 1989.122283][T20888] loop4: detected capacity change from 0 to 224 06:12:42 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bff0ffffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:42 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xe00400, 0x0, 0x40000006) 06:12:42 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15c7fe, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1989.281745][T20907] loop5: detected capacity change from 0 to 544 [ 1989.298707][T20910] loop4: detected capacity change from 0 to 224 [ 1989.304306][T20907] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:42 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xe80400, 0x0, 0x40000006) 06:12:42 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bff6ffffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:42 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x780200, 0x40000006) [ 1989.391247][T20907] loop5: detected capacity change from 0 to 544 [ 1989.403618][T20907] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:42 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xf00400, 0x0, 0x40000006) [ 1989.456163][T20937] loop4: detected capacity change from 0 to 224 06:12:42 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bffeffffff0000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:42 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x780700, 0x40000006) 06:12:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000ffffff850b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:42 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xf80400, 0x0, 0x40000006) 06:12:42 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x54800, 0x40000006) 06:12:42 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000200000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1989.580198][T20959] loop4: detected capacity change from 0 to 224 06:12:42 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15cffc, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1989.666170][T20975] loop4: detected capacity change from 0 to 224 [ 1989.667981][T20973] loop5: detected capacity change from 0 to 544 06:12:42 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000300000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:42 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xf80500, 0x0, 0x40000006) [ 1989.735812][T20973] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:42 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x1000000, 0x0, 0x40000006) 06:12:42 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000400000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1989.782957][T20988] loop4: detected capacity change from 0 to 224 [ 1989.805931][T20973] loop5: detected capacity change from 0 to 544 [ 1989.821965][T20973] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000ffffff8c0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:43 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15d000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1989.969465][T21013] loop4: detected capacity change from 0 to 224 [ 1989.970049][T21015] loop5: detected capacity change from 0 to 544 06:12:43 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7c0000, 0x40000006) 06:12:43 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x1480700, 0x0, 0x40000006) 06:12:43 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000500000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1990.027381][T21015] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:43 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x55000, 0x40000006) 06:12:43 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15d7fb, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:43 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x2000000, 0x0, 0x40000006) 06:12:43 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000600000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1990.092561][T21038] loop4: detected capacity change from 0 to 224 [ 1990.094140][T21015] loop5: detected capacity change from 0 to 544 [ 1990.150976][T21015] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000ffffff970b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) [ 1990.197087][T21057] loop4: detected capacity change from 0 to 224 06:12:43 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000700000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:43 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x3000000, 0x0, 0x40000006) [ 1990.264362][T21068] loop5: detected capacity change from 0 to 544 [ 1990.293713][T21068] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1990.322353][T21074] loop4: detected capacity change from 0 to 224 06:12:43 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000800000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:43 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4000000, 0x0, 0x40000006) [ 1990.368559][T21068] loop5: detected capacity change from 0 to 544 [ 1990.377644][T21068] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:43 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x7c0200, 0x40000006) 06:12:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000000000edc00b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:43 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15d800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1990.507191][T21104] loop4: detected capacity change from 0 to 224 [ 1990.516620][T21105] loop5: detected capacity change from 0 to 544 [ 1990.546101][T21105] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1990.632727][T21105] loop5: detected capacity change from 0 to 544 [ 1990.641431][T21105] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:43 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000900000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:43 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x4860000, 0x0, 0x40000006) 06:12:43 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x800000, 0x40000006) 06:12:43 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x55800, 0x40000006) 06:12:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000ffffffda0b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:43 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15dff5, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:43 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x5000000, 0x0, 0x40000006) [ 1990.745981][T21140] loop5: detected capacity change from 0 to 544 [ 1990.761150][T21140] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1990.779387][T21148] loop4: detected capacity change from 0 to 224 06:12:43 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000a00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1990.850852][T21140] loop5: detected capacity change from 0 to 544 [ 1990.861857][T21140] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:43 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x6000000, 0x0, 0x40000006) [ 1990.907945][T21168] loop4: detected capacity change from 0 to 224 06:12:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f0000000000000000010000004067c1e60b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:44 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000b00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:44 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x7000000, 0x0, 0x40000006) 06:12:44 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15e000, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1990.987854][T21180] loop5: detected capacity change from 0 to 544 [ 1991.032230][T21180] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1991.057111][T21193] loop4: detected capacity change from 0 to 224 06:12:44 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x8000000, 0x0, 0x40000006) [ 1991.094226][T21180] loop5: detected capacity change from 0 to 544 [ 1991.118253][T21180] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:44 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x800200, 0x40000006) 06:12:44 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000c00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:44 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x56000, 0x40000006) 06:12:44 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x9000000, 0x0, 0x40000006) 06:12:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000001f00b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:44 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15e7b0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 06:12:44 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xa000000, 0x0, 0x40000006) [ 1991.262385][T21229] loop4: detected capacity change from 0 to 224 [ 1991.284136][T21239] loop5: detected capacity change from 0 to 544 06:12:44 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000d00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1991.323745][T21239] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:44 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xb000000, 0x0, 0x40000006) [ 1991.394254][T21239] loop5: detected capacity change from 0 to 544 [ 1991.410858][T21239] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1991.428826][T21259] loop4: detected capacity change from 0 to 224 06:12:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000fffffff60b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:44 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xc000000, 0x0, 0x40000006) 06:12:44 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000e00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1991.482990][T21259] loop4: detected capacity change from 0 to 224 [ 1991.522421][T21277] loop5: detected capacity change from 0 to 544 [ 1991.547084][T21277] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1991.597784][T21286] loop4: detected capacity change from 0 to 224 [ 1991.617716][T21277] loop5: detected capacity change from 0 to 544 [ 1991.634165][T21277] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) 06:12:44 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x3f, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, 0xf53c, 0x7fff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0xd000000, 0x0, 0x40000006) 06:12:44 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x800700, 0x40000006) 06:12:44 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000f00000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 06:12:44 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x143242, 0x1e1) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8480, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340)}, 0x100a2, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/190, 0xbe}], 0x3, 0xf53c, 0x7fff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5f432732f4e096d26e2c735d135121c921bda40b8585be0a8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x5c800, 0x40000006) 06:12:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000fffffdf90b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000001990af8004b044aa58d0b5010400000c0000000000002e15f4", 0x25, 0x4e0}, {0x0}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000000140)) 06:12:44 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0xffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x15e800, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1991.765450][T21309] loop4: detected capacity change from 0 to 224 [ 1991.770992][T21314] loop5: detected capacity change from 0 to 544 06:12:44 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf001000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1a99fa008bf3cdf9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d28aed9955cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180700c815b0e595e32be6c6710c11cc3ce08288a4ef2f0", 0xa2, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1991.836417][T21314] EXT4-fs (loop5): first meta block group too large: 244 (group descriptor block count 1) [ 1991.889888][T21329] loop4: detected capacity change from 0 to 224 06:12:45 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e005500580020002000