1.544290][T18155] FAULT_INJECTION: forcing a failure. [ 201.544290][T18155] name failslab, interval 1, probability 0, space 0, times 0 [ 201.557198][T18155] CPU: 1 PID: 18155 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 201.566018][T18155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.576077][T18155] Call Trace: [ 201.579351][T18155] dump_stack_lvl+0xd6/0x122 [ 201.584463][T18155] dump_stack+0x11/0x1b [ 201.588622][T18155] should_fail+0x23c/0x250 [ 201.593048][T18155] __should_failslab+0x81/0x90 [ 201.597836][T18155] ? kobject_uevent_env+0x1a7/0xc40 [ 201.603053][T18155] should_failslab+0x5/0x20 [ 201.607556][T18155] kmem_cache_alloc_trace+0x52/0x320 [ 201.612839][T18155] ? pwq_adjust_max_active+0x491/0x4b0 [ 201.618514][T18155] ? dev_uevent_filter+0x70/0x70 [ 201.623456][T18155] kobject_uevent_env+0x1a7/0xc40 [ 201.624600][T18163] loop4: detected capacity change from 0 to 1054 [ 201.628495][T18155] ? __list_add_valid+0x28/0x90 [ 201.628518][T18155] ? alloc_workqueue+0xa18/0xad0 [ 201.644387][T18163] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 201.644673][T18155] disk_force_media_change+0xe3/0x170 [ 201.656826][T18155] loop_configure+0x6c0/0xeb0 [ 201.661546][T18155] lo_ioctl+0x618/0x13e0 [ 201.665789][T18155] ? path_openat+0x18d4/0x1ec0 [ 201.670605][T18155] ? blkdev_common_ioctl+0x438/0x1110 [ 201.676048][T18155] ? selinux_file_ioctl+0x981/0xa10 [ 201.681266][T18155] ? lo_release+0x120/0x120 [ 201.685763][T18155] blkdev_ioctl+0x1d0/0x3f0 [ 201.690259][T18155] block_ioctl+0x6e/0x80 [ 201.694494][T18155] ? blkdev_iopoll+0x80/0x80 [ 201.699100][T18155] __se_sys_ioctl+0xcb/0x140 [ 201.703689][T18155] __x64_sys_ioctl+0x3f/0x50 [ 201.708262][T18155] do_syscall_64+0x44/0xa0 [ 201.712663][T18155] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 201.718616][T18155] RIP: 0033:0x7f46fee54697 [ 201.723021][T18155] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:42:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x40000, 0x0) close(r0) 17:42:30 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 201.743053][T18155] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.751506][T18155] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 201.759461][T18155] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 201.767584][T18155] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 201.775537][T18155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 201.783490][T18155] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 201.793760][T18155] loop3: detected capacity change from 0 to 1054 17:42:30 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 201.816587][T18155] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 201.855678][T18155] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 201.868280][T18175] loop4: detected capacity change from 0 to 1054 [ 201.906967][T18175] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 17:42:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x46000, 0x0) close(r0) [ 201.929050][T18155] EXT4-fs (loop3): get root inode failed [ 201.934764][T18155] EXT4-fs (loop3): mount failed [ 201.947732][ C1] sd 0:0:1:0: tag#8160 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 201.957588][ C1] sd 0:0:1:0: tag#8160 CDB: opcode=0xe5 (vendor) [ 201.964019][ C1] sd 0:0:1:0: tag#8160 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 17:42:30 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:30 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 23) [ 201.973075][ C1] sd 0:0:1:0: tag#8160 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 201.982114][ C1] sd 0:0:1:0: tag#8160 CDB[20]: 80 19 [ 202.014899][T18195] loop4: detected capacity change from 0 to 1054 17:42:30 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 202.054992][T18195] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 202.093225][T18207] FAULT_INJECTION: forcing a failure. [ 202.093225][T18207] name failslab, interval 1, probability 0, space 0, times 0 [ 202.105894][T18207] CPU: 1 PID: 18207 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 202.114653][T18207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.124700][T18207] Call Trace: [ 202.127972][T18207] dump_stack_lvl+0xd6/0x122 [ 202.132633][T18207] dump_stack+0x11/0x1b [ 202.136788][T18207] should_fail+0x23c/0x250 [ 202.141195][T18207] ? kzalloc+0x1d/0x30 [ 202.145251][T18207] __should_failslab+0x81/0x90 [ 202.150094][T18207] should_failslab+0x5/0x20 [ 202.154594][T18207] __kmalloc+0x6f/0x350 [ 202.158736][T18207] kzalloc+0x1d/0x30 [ 202.162621][T18207] kobject_get_path+0x7c/0x110 [ 202.167445][T18207] kobject_uevent_env+0x1be/0xc40 [ 202.172455][T18207] ? __list_add_valid+0x28/0x90 [ 202.177357][T18207] ? alloc_workqueue+0xa18/0xad0 [ 202.182329][T18207] disk_force_media_change+0xe3/0x170 [ 202.187695][T18207] loop_configure+0x6c0/0xeb0 [ 202.192356][T18207] lo_ioctl+0x618/0x13e0 [ 202.196587][T18207] ? path_openat+0x18d4/0x1ec0 [ 202.201395][T18207] ? blkdev_common_ioctl+0x438/0x1110 [ 202.206765][T18207] ? selinux_file_ioctl+0x981/0xa10 [ 202.211998][T18207] ? lo_release+0x120/0x120 [ 202.216486][T18207] blkdev_ioctl+0x1d0/0x3f0 [ 202.221066][T18207] block_ioctl+0x6e/0x80 [ 202.225294][T18207] ? blkdev_iopoll+0x80/0x80 [ 202.229865][T18207] __se_sys_ioctl+0xcb/0x140 [ 202.234437][T18207] __x64_sys_ioctl+0x3f/0x50 [ 202.239053][T18207] do_syscall_64+0x44/0xa0 [ 202.243546][T18207] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 202.249558][T18207] RIP: 0033:0x7f46fee54697 [ 202.253952][T18207] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 202.273621][T18207] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.282015][T18207] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 202.289971][T18207] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 202.297960][T18207] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 202.306099][T18207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 202.314051][T18207] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 202.323022][ C0] sd 0:0:1:0: tag#8128 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 202.332875][ C0] sd 0:0:1:0: tag#8128 CDB: opcode=0xe5 (vendor) [ 202.339233][ C0] sd 0:0:1:0: tag#8128 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 202.348264][ C0] sd 0:0:1:0: tag#8128 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 202.357284][ C0] sd 0:0:1:0: tag#8128 CDB[20]: 80 19 [ 202.372067][T18207] loop3: detected capacity change from 0 to 1054 17:42:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x46006, 0x0) close(r0) [ 202.434255][T18207] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 202.447242][T18222] loop4: detected capacity change from 0 to 1054 [ 202.460722][T18222] EXT4-fs (loop4): invalid first ino: 0 17:42:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 202.477335][T18207] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:42:34 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 202.511301][T18207] EXT4-fs (loop3): get root inode failed [ 202.516971][T18207] EXT4-fs (loop3): mount failed [ 202.548804][ C1] sd 0:0:1:0: tag#8178 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 202.558679][ C1] sd 0:0:1:0: tag#8178 CDB: opcode=0xe5 (vendor) [ 202.565065][ C1] sd 0:0:1:0: tag#8178 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 202.574098][ C1] sd 0:0:1:0: tag#8178 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 202.583147][ C1] sd 0:0:1:0: tag#8178 CDB[20]: 80 19 [ 202.603797][T18241] loop4: detected capacity change from 0 to 1054 17:42:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 24) [ 202.612377][T18241] EXT4-fs (loop4): invalid first ino: 0 17:42:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 202.717755][T18257] FAULT_INJECTION: forcing a failure. [ 202.717755][T18257] name failslab, interval 1, probability 0, space 0, times 0 [ 202.730412][T18257] CPU: 1 PID: 18257 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 202.739172][T18257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.749294][T18257] Call Trace: [ 202.752565][T18257] dump_stack_lvl+0xd6/0x122 [ 202.757253][T18257] dump_stack+0x11/0x1b [ 202.762080][T18257] should_fail+0x23c/0x250 [ 202.766508][T18257] __should_failslab+0x81/0x90 [ 202.771284][T18257] should_failslab+0x5/0x20 [ 202.775821][T18257] kmem_cache_alloc_node+0x61/0x2c0 [ 202.781048][T18257] ? __alloc_skb+0xed/0x420 [ 202.785542][T18257] __alloc_skb+0xed/0x420 [ 202.789981][T18257] alloc_uevent_skb+0x5b/0x120 [ 202.794773][T18257] kobject_uevent_env+0x863/0xc40 [ 202.799817][T18257] disk_force_media_change+0xe3/0x170 [ 202.805190][T18257] loop_configure+0x6c0/0xeb0 [ 202.809934][T18257] lo_ioctl+0x618/0x13e0 [ 202.814301][T18257] ? path_openat+0x18d4/0x1ec0 [ 202.819061][T18257] ? blkdev_common_ioctl+0x438/0x1110 [ 202.824421][T18257] ? selinux_file_ioctl+0x981/0xa10 [ 202.829605][T18257] ? lo_release+0x120/0x120 [ 202.834090][T18257] blkdev_ioctl+0x1d0/0x3f0 [ 202.838583][T18257] block_ioctl+0x6e/0x80 [ 202.842820][T18257] ? blkdev_iopoll+0x80/0x80 [ 202.847432][T18257] __se_sys_ioctl+0xcb/0x140 [ 202.852002][T18257] __x64_sys_ioctl+0x3f/0x50 [ 202.856575][T18257] do_syscall_64+0x44/0xa0 [ 202.860983][T18257] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 202.866863][T18257] RIP: 0033:0x7f46fee54697 [ 202.871257][T18257] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 202.890869][T18257] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.899262][T18257] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 202.907212][T18257] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 202.915171][T18257] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 202.923125][T18257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 202.931079][T18257] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 17:42:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x46008, 0x0) close(r0) [ 202.982606][T18257] loop3: detected capacity change from 0 to 1054 [ 202.992001][T18257] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 202.993840][T18260] loop4: detected capacity change from 0 to 1054 [ 203.033698][T18257] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 203.046255][T18260] EXT4-fs (loop4): invalid first ino: 0 [ 203.052134][T18257] EXT4-fs (loop3): get root inode failed [ 203.057778][T18257] EXT4-fs (loop3): mount failed 17:42:34 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:34 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 25) 17:42:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x48018, 0x0) close(r0) [ 203.185291][T18295] loop4: detected capacity change from 0 to 1054 [ 203.196455][ C1] sd 0:0:1:0: tag#8179 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 203.206312][ C1] sd 0:0:1:0: tag#8179 CDB: opcode=0xe5 (vendor) [ 203.212643][ C1] sd 0:0:1:0: tag#8179 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 203.221679][ C1] sd 0:0:1:0: tag#8179 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 203.224320][T18295] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 203.230718][ C1] sd 0:0:1:0: tag#8179 CDB[20]: 80 19 [ 203.251398][T18297] FAULT_INJECTION: forcing a failure. [ 203.251398][T18297] name failslab, interval 1, probability 0, space 0, times 0 [ 203.264021][T18297] CPU: 0 PID: 18297 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 203.272779][T18297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.282833][T18297] Call Trace: [ 203.286106][T18297] dump_stack_lvl+0xd6/0x122 [ 203.290754][T18297] dump_stack+0x11/0x1b [ 203.294907][T18297] should_fail+0x23c/0x250 [ 203.299373][T18297] __should_failslab+0x81/0x90 [ 203.304258][T18297] should_failslab+0x5/0x20 [ 203.308766][T18297] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 203.314487][T18297] ? __kmalloc_node_track_caller+0x30/0x40 [ 203.320314][T18297] __kmalloc_node_track_caller+0x30/0x40 [ 203.326018][T18297] ? alloc_uevent_skb+0x5b/0x120 [ 203.330959][T18297] __alloc_skb+0x187/0x420 [ 203.335372][T18297] alloc_uevent_skb+0x5b/0x120 [ 203.340138][T18297] kobject_uevent_env+0x863/0xc40 [ 203.345429][T18297] disk_force_media_change+0xe3/0x170 [ 203.350960][T18297] loop_configure+0x6c0/0xeb0 [ 203.355698][T18297] lo_ioctl+0x618/0x13e0 [ 203.359945][T18297] ? path_openat+0x18d4/0x1ec0 [ 203.360028][T18297] ? blkdev_common_ioctl+0x438/0x1110 [ 203.370075][T18297] ? selinux_file_ioctl+0x981/0xa10 [ 203.375356][T18297] ? lo_release+0x120/0x120 [ 203.379876][T18297] blkdev_ioctl+0x1d0/0x3f0 [ 203.384449][T18297] block_ioctl+0x6e/0x80 [ 203.388864][T18297] ? blkdev_iopoll+0x80/0x80 [ 203.393451][T18297] __se_sys_ioctl+0xcb/0x140 [ 203.398061][T18297] __x64_sys_ioctl+0x3f/0x50 [ 203.402650][T18297] do_syscall_64+0x44/0xa0 [ 203.407135][T18297] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 203.413059][T18297] RIP: 0033:0x7f46fee54697 [ 203.417467][T18297] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 203.437078][T18297] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.445548][T18297] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 203.453524][T18297] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 203.461575][T18297] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 203.470841][T18297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 203.478805][T18297] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 17:42:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 203.577827][T18297] loop3: detected capacity change from 0 to 1054 [ 203.604318][T18297] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:42:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x48020, 0x0) close(r0) [ 203.659938][T18297] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 203.671741][T18318] loop4: detected capacity change from 0 to 1054 [ 203.678813][T18297] EXT4-fs (loop3): get root inode failed [ 203.684475][T18297] EXT4-fs (loop3): mount failed 17:42:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:35 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 203.707949][T18318] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 17:42:35 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 26) 17:42:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 203.822842][T18341] loop4: detected capacity change from 0 to 1054 [ 203.837731][T18341] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 203.855463][T18342] FAULT_INJECTION: forcing a failure. [ 203.855463][T18342] name failslab, interval 1, probability 0, space 0, times 0 17:42:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x4d800, 0x0) close(r0) [ 203.868097][T18342] CPU: 1 PID: 18342 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 203.876852][T18342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.887050][T18342] Call Trace: [ 203.890314][T18342] dump_stack_lvl+0xd6/0x122 [ 203.894960][T18342] dump_stack+0x11/0x1b [ 203.899093][T18342] should_fail+0x23c/0x250 [ 203.903484][T18342] ? skb_clone+0x12c/0x1f0 [ 203.907883][T18342] __should_failslab+0x81/0x90 [ 203.912649][T18342] should_failslab+0x5/0x20 [ 203.917215][T18342] kmem_cache_alloc+0x4f/0x300 [ 203.921982][T18342] skb_clone+0x12c/0x1f0 [ 203.926284][T18342] netlink_broadcast_filtered+0x4fd/0xb60 [ 203.932027][T18342] ? skb_put+0xb9/0xf0 [ 203.936118][T18342] netlink_broadcast+0x35/0x50 [ 203.940903][T18342] kobject_uevent_env+0x8c9/0xc40 [ 203.945937][T18342] disk_force_media_change+0xe3/0x170 [ 203.951317][T18342] loop_configure+0x6c0/0xeb0 [ 203.955993][T18342] lo_ioctl+0x618/0x13e0 [ 203.960236][T18342] ? path_openat+0x18d4/0x1ec0 [ 203.965123][T18342] ? blkdev_common_ioctl+0x438/0x1110 [ 203.970493][T18342] ? selinux_file_ioctl+0x981/0xa10 [ 203.975682][T18342] ? lo_release+0x120/0x120 [ 203.980173][T18342] blkdev_ioctl+0x1d0/0x3f0 [ 203.984665][T18342] block_ioctl+0x6e/0x80 [ 203.988985][T18342] ? blkdev_iopoll+0x80/0x80 [ 203.993561][T18342] __se_sys_ioctl+0xcb/0x140 [ 203.998152][T18342] __x64_sys_ioctl+0x3f/0x50 [ 204.002732][T18342] do_syscall_64+0x44/0xa0 [ 204.007147][T18342] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 204.013098][T18342] RIP: 0033:0x7f46fee54697 [ 204.017502][T18342] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 204.037124][T18342] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.045602][T18342] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 204.053710][T18342] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 204.061724][T18342] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 204.069687][T18342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 204.077646][T18342] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 204.110432][T18342] loop3: detected capacity change from 0 to 1054 17:42:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:35 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x50000, 0x0) close(r0) [ 204.140966][T18342] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:42:35 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 204.179922][T18342] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 204.182069][T18370] loop4: detected capacity change from 0 to 1054 [ 204.212741][T18370] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 204.232900][ C0] sd 0:0:1:0: tag#8174 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 204.242764][ C0] sd 0:0:1:0: tag#8174 CDB: opcode=0xe5 (vendor) [ 204.249150][ C0] sd 0:0:1:0: tag#8174 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 204.258187][ C0] sd 0:0:1:0: tag#8174 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 204.267221][ C0] sd 0:0:1:0: tag#8174 CDB[20]: 80 19 17:42:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 204.375490][T18342] EXT4-fs (loop3): get root inode failed [ 204.381160][T18342] EXT4-fs (loop3): mount failed 17:42:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 27) 17:42:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:35 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:35 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 204.455823][T18397] loop4: detected capacity change from 0 to 1054 [ 204.463962][T18397] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 17:42:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x55000, 0x0) close(r0) [ 204.513006][T18408] FAULT_INJECTION: forcing a failure. [ 204.513006][T18408] name failslab, interval 1, probability 0, space 0, times 0 [ 204.525631][T18408] CPU: 1 PID: 18408 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 204.534385][T18408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.544457][T18408] Call Trace: [ 204.547729][T18408] dump_stack_lvl+0xd6/0x122 [ 204.552402][T18408] dump_stack+0x11/0x1b [ 204.556554][T18408] should_fail+0x23c/0x250 [ 204.560983][T18408] __should_failslab+0x81/0x90 [ 204.565744][T18408] ? call_usermodehelper_setup+0x71/0x190 [ 204.571495][T18408] should_failslab+0x5/0x20 [ 204.575994][T18408] kmem_cache_alloc_trace+0x52/0x320 [ 204.581280][T18408] call_usermodehelper_setup+0x71/0x190 [ 204.586834][T18408] ? add_uevent_var+0x1d0/0x1d0 [ 204.591689][T18408] kobject_uevent_env+0xb29/0xc40 [ 204.596800][T18408] disk_force_media_change+0xe3/0x170 [ 204.602182][T18408] loop_configure+0x6c0/0xeb0 [ 204.606861][T18408] lo_ioctl+0x618/0x13e0 [ 204.611104][T18408] ? path_openat+0x18d4/0x1ec0 [ 204.613688][ C0] sd 0:0:1:0: tag#8162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 204.615868][T18408] ? blkdev_common_ioctl+0x438/0x1110 [ 204.615890][T18408] ? selinux_file_ioctl+0x981/0xa10 [ 204.625714][ C0] sd 0:0:1:0: tag#8162 CDB: opcode=0xe5 (vendor) [ 204.631056][T18408] ? lo_release+0x120/0x120 [ 204.636262][ C0] sd 0:0:1:0: tag#8162 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 204.642539][T18408] blkdev_ioctl+0x1d0/0x3f0 17:42:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x57800, 0x0) close(r0) [ 204.647052][ C0] sd 0:0:1:0: tag#8162 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 204.656016][T18408] block_ioctl+0x6e/0x80 [ 204.660601][ C0] sd 0:0:1:0: tag#8162 CDB[20]: 80 19 [ 204.669568][T18408] ? blkdev_iopoll+0x80/0x80 [ 204.669585][T18408] __se_sys_ioctl+0xcb/0x140 [ 204.688359][T18408] __x64_sys_ioctl+0x3f/0x50 [ 204.692991][T18408] do_syscall_64+0x44/0xa0 [ 204.697406][T18408] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 204.703346][T18408] RIP: 0033:0x7f46fee54697 [ 204.707757][T18408] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 204.727346][T18408] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.735742][T18408] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 204.743706][T18408] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 204.751663][T18408] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 204.759638][T18408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 204.767592][T18408] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 204.777623][T18408] loop3: detected capacity change from 0 to 1054 [ 204.789571][T18408] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:42:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:36 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:36 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xa, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 204.810721][T18408] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 204.850450][T18408] EXT4-fs (loop3): get root inode failed [ 204.856147][T18408] EXT4-fs (loop3): mount failed [ 204.908907][ C1] sd 0:0:1:0: tag#8176 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 204.911295][T18437] loop4: detected capacity change from 0 to 1054 [ 204.918818][ C1] sd 0:0:1:0: tag#8176 CDB: opcode=0xe5 (vendor) [ 204.931429][ C1] sd 0:0:1:0: tag#8176 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 204.939843][T18437] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 204.940502][ C1] sd 0:0:1:0: tag#8176 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 204.957658][ C1] sd 0:0:1:0: tag#8176 CDB[20]: 80 19 17:42:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xb, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 28) 17:42:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x59000, 0x0) close(r0) [ 205.101086][T18458] loop4: detected capacity change from 0 to 1054 [ 205.122172][T18465] FAULT_INJECTION: forcing a failure. [ 205.122172][T18465] name failslab, interval 1, probability 0, space 0, times 0 [ 205.134843][T18465] CPU: 0 PID: 18465 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 205.142599][T18458] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 205.143597][T18465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.161761][T18465] Call Trace: [ 205.165031][T18465] dump_stack_lvl+0xd6/0x122 [ 205.169675][T18465] dump_stack+0x11/0x1b [ 205.173825][T18465] should_fail+0x23c/0x250 [ 205.178234][T18465] ? __kernfs_new_node+0x6a/0x330 [ 205.183272][T18465] __should_failslab+0x81/0x90 [ 205.188067][T18465] should_failslab+0x5/0x20 [ 205.192565][T18465] kmem_cache_alloc+0x4f/0x300 [ 205.197328][T18465] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 205.203135][T18465] __kernfs_new_node+0x6a/0x330 [ 205.208008][T18465] ? ___cache_free+0x3c/0x300 [ 205.212686][T18465] ? kfree+0xf8/0x1d0 [ 205.216760][T18465] kernfs_create_dir_ns+0x5e/0x140 [ 205.221874][T18465] internal_create_group+0x148/0x860 [ 205.227156][T18465] ? __invalidate_device+0xb0/0xc0 [ 205.232363][T18465] ? set_disk_ro+0x73/0x110 [ 205.237017][T18465] sysfs_create_group+0x1b/0x20 [ 205.241899][T18465] loop_configure+0xbcd/0xeb0 [ 205.246629][T18465] lo_ioctl+0x618/0x13e0 [ 205.250870][T18465] ? path_openat+0x18d4/0x1ec0 [ 205.255650][T18465] ? blkdev_common_ioctl+0x438/0x1110 [ 205.261025][T18465] ? selinux_file_ioctl+0x981/0xa10 [ 205.266227][T18465] ? lo_release+0x120/0x120 [ 205.270728][T18465] blkdev_ioctl+0x1d0/0x3f0 [ 205.275227][T18465] block_ioctl+0x6e/0x80 [ 205.279991][T18465] ? blkdev_iopoll+0x80/0x80 [ 205.284575][T18465] __se_sys_ioctl+0xcb/0x140 [ 205.289165][T18465] __x64_sys_ioctl+0x3f/0x50 [ 205.293766][T18465] do_syscall_64+0x44/0xa0 [ 205.298861][T18465] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 205.304767][T18465] RIP: 0033:0x7f46fee54697 [ 205.309176][T18465] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 205.328861][T18465] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.337334][T18465] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 17:42:36 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xa, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 205.345300][T18465] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 205.353348][T18465] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 205.361483][T18465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 205.369528][T18465] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 205.377554][T18465] loop3: detected capacity change from 0 to 1054 17:42:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5c800, 0x0) close(r0) 17:42:37 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xb, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 205.560099][T18465] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 205.595203][T18465] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:42:37 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 205.636969][T18465] EXT4-fs (loop3): get root inode failed [ 205.642629][T18465] EXT4-fs (loop3): mount failed [ 205.727304][ C0] sd 0:0:1:0: tag#8156 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 205.737155][ C0] sd 0:0:1:0: tag#8156 CDB: opcode=0xe5 (vendor) [ 205.743600][ C0] sd 0:0:1:0: tag#8156 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 205.752731][ C0] sd 0:0:1:0: tag#8156 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 205.761776][ C0] sd 0:0:1:0: tag#8156 CDB[20]: 80 19 17:42:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 29) [ 205.927662][T18509] FAULT_INJECTION: forcing a failure. [ 205.927662][T18509] name failslab, interval 1, probability 0, space 0, times 0 [ 205.940500][T18509] CPU: 0 PID: 18509 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 205.949439][T18509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.959607][T18509] Call Trace: [ 205.962890][T18509] dump_stack_lvl+0xd6/0x122 [ 205.967484][T18509] dump_stack+0x11/0x1b [ 205.971639][T18509] should_fail+0x23c/0x250 [ 205.976066][T18509] ? radix_tree_node_alloc+0x154/0x1f0 [ 205.981591][T18509] __should_failslab+0x81/0x90 [ 205.986356][T18509] should_failslab+0x5/0x20 [ 205.990858][T18509] kmem_cache_alloc+0x4f/0x300 [ 205.995616][T18509] ? __perf_event_task_sched_in+0x7e7/0x850 [ 206.001553][T18509] radix_tree_node_alloc+0x154/0x1f0 [ 206.006836][T18509] idr_get_free+0x22a/0x5d0 [ 206.011357][T18509] ? try_to_wake_up+0x362/0x480 [ 206.016202][T18509] idr_alloc_cyclic+0xf4/0x2f0 [ 206.021052][T18509] __kernfs_new_node+0xb4/0x330 [ 206.025958][T18509] ? ___cache_free+0x3c/0x300 [ 206.030775][T18509] ? kfree+0xf8/0x1d0 [ 206.034763][T18509] kernfs_create_dir_ns+0x5e/0x140 [ 206.039877][T18509] internal_create_group+0x148/0x860 [ 206.045260][T18509] ? __invalidate_device+0xb0/0xc0 [ 206.050421][T18509] ? set_disk_ro+0x73/0x110 [ 206.054926][T18509] sysfs_create_group+0x1b/0x20 [ 206.059776][T18509] loop_configure+0xbcd/0xeb0 [ 206.064567][T18509] lo_ioctl+0x618/0x13e0 [ 206.068822][T18509] ? path_openat+0x18d4/0x1ec0 [ 206.073608][T18509] ? blkdev_common_ioctl+0x438/0x1110 [ 206.079054][T18509] ? selinux_file_ioctl+0x981/0xa10 [ 206.084265][T18509] ? lo_release+0x120/0x120 [ 206.088765][T18509] blkdev_ioctl+0x1d0/0x3f0 [ 206.093361][T18509] block_ioctl+0x6e/0x80 [ 206.097608][T18509] ? blkdev_iopoll+0x80/0x80 [ 206.102296][T18509] __se_sys_ioctl+0xcb/0x140 [ 206.106884][T18509] __x64_sys_ioctl+0x3f/0x50 [ 206.111474][T18509] do_syscall_64+0x44/0xa0 [ 206.115894][T18509] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 206.121790][T18509] RIP: 0033:0x7f46fee54697 [ 206.126197][T18509] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 206.145892][T18509] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.154307][T18509] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 206.162281][T18509] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 206.170261][T18509] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 17:42:37 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5cffe, 0x0) close(r0) [ 206.178384][T18509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 206.186353][T18509] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 17:42:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:37 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 206.224731][T18509] loop3: detected capacity change from 0 to 1054 [ 206.252535][T18509] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:42:37 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 206.272082][T18509] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 206.312706][T18509] EXT4-fs (loop3): get root inode failed [ 206.318408][T18509] EXT4-fs (loop3): mount failed [ 206.331041][ C0] sd 0:0:1:0: tag#8131 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 206.340985][ C0] sd 0:0:1:0: tag#8131 CDB: opcode=0xe5 (vendor) [ 206.347339][ C0] sd 0:0:1:0: tag#8131 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 206.356356][ C0] sd 0:0:1:0: tag#8131 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 206.365397][ C0] sd 0:0:1:0: tag#8131 CDB[20]: 80 19 17:42:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 30) [ 206.476906][T18543] FAULT_INJECTION: forcing a failure. [ 206.476906][T18543] name failslab, interval 1, probability 0, space 0, times 0 [ 206.489669][T18543] CPU: 1 PID: 18543 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 206.498421][T18543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.508462][T18543] Call Trace: [ 206.511771][T18543] dump_stack_lvl+0xd6/0x122 [ 206.516360][T18543] dump_stack+0x11/0x1b [ 206.520505][T18543] should_fail+0x23c/0x250 [ 206.524915][T18543] ? __kernfs_new_node+0x6a/0x330 [ 206.529929][T18543] __should_failslab+0x81/0x90 [ 206.534697][T18543] should_failslab+0x5/0x20 [ 206.539192][T18543] kmem_cache_alloc+0x4f/0x300 [ 206.543947][T18543] __kernfs_new_node+0x6a/0x330 [ 206.548790][T18543] ? __down_write_common+0x42/0x830 [ 206.553986][T18543] ? idr_alloc_cyclic+0x26b/0x2f0 [ 206.559014][T18543] ? __down_write_common+0x42/0x830 [ 206.564299][T18543] ? rb_insert_color+0x7e/0x310 [ 206.569151][T18543] kernfs_new_node+0x5b/0xd0 [ 206.573745][T18543] __kernfs_create_file+0x45/0x1a0 [ 206.578862][T18543] sysfs_add_file_mode_ns+0x1c1/0x250 [ 206.584320][T18543] internal_create_group+0x2f4/0x860 [ 206.589621][T18543] sysfs_create_group+0x1b/0x20 [ 206.594460][T18543] loop_configure+0xbcd/0xeb0 [ 206.599215][T18543] lo_ioctl+0x618/0x13e0 [ 206.603462][T18543] ? path_openat+0x18d4/0x1ec0 [ 206.608224][T18543] ? blkdev_common_ioctl+0x438/0x1110 [ 206.613658][T18543] ? selinux_file_ioctl+0x981/0xa10 [ 206.618863][T18543] ? lo_release+0x120/0x120 [ 206.623370][T18543] blkdev_ioctl+0x1d0/0x3f0 [ 206.627869][T18543] block_ioctl+0x6e/0x80 [ 206.632166][T18543] ? blkdev_iopoll+0x80/0x80 [ 206.636814][T18543] __se_sys_ioctl+0xcb/0x140 [ 206.641422][T18543] __x64_sys_ioctl+0x3f/0x50 [ 206.646068][T18543] do_syscall_64+0x44/0xa0 [ 206.650549][T18543] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 206.656448][T18543] RIP: 0033:0x7f46fee54697 [ 206.660851][T18543] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 206.680453][T18543] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.688867][T18543] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 206.696890][T18543] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 206.704853][T18543] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 206.712848][T18543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 206.720913][T18543] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 206.729961][T18543] loop3: detected capacity change from 0 to 1054 [ 206.744630][T18543] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 206.754173][T18543] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 206.766709][T18543] EXT4-fs (loop3): get root inode failed [ 206.772440][T18543] EXT4-fs (loop3): mount failed [ 207.345170][T18557] cgroup: Unknown subsys name 'perf_event' [ 207.351118][T18557] cgroup: Unknown subsys name 'net_cls' [ 208.444653][T19012] loop4: detected capacity change from 0 to 1054 [ 208.454316][T19012] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 17:42:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5d000, 0x0) close(r0) 17:42:39 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:39 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:39 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 31) [ 208.558101][T19026] FAULT_INJECTION: forcing a failure. [ 208.558101][T19026] name failslab, interval 1, probability 0, space 0, times 0 [ 208.570745][T19026] CPU: 0 PID: 19026 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 208.574111][T19032] loop4: detected capacity change from 0 to 1054 [ 208.579586][T19026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.579599][T19026] Call Trace: [ 208.579605][T19026] dump_stack_lvl+0xd6/0x122 [ 208.579636][T19026] dump_stack+0x11/0x1b [ 208.602174][T19032] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 208.603878][T19026] should_fail+0x23c/0x250 [ 208.620606][T19026] ? __kernfs_new_node+0x6a/0x330 [ 208.625627][T19026] __should_failslab+0x81/0x90 [ 208.630499][T19026] should_failslab+0x5/0x20 [ 208.635035][T19026] kmem_cache_alloc+0x4f/0x300 [ 208.639800][T19026] ? __down_write_common+0x42/0x830 [ 208.645000][T19026] __kernfs_new_node+0x6a/0x330 [ 208.649876][T19026] ? up_write+0x25/0xc0 [ 208.654029][T19026] kernfs_new_node+0x5b/0xd0 [ 208.658656][T19026] __kernfs_create_file+0x45/0x1a0 [ 208.663761][T19026] sysfs_add_file_mode_ns+0x1c1/0x250 [ 208.669201][T19026] internal_create_group+0x2f4/0x860 [ 208.674479][T19026] ? set_disk_ro+0x73/0x110 [ 208.679065][T19026] sysfs_create_group+0x1b/0x20 [ 208.683987][T19026] loop_configure+0xbcd/0xeb0 [ 208.688671][T19026] lo_ioctl+0x618/0x13e0 [ 208.692908][T19026] ? path_openat+0x18d4/0x1ec0 [ 208.697772][T19026] ? blkdev_common_ioctl+0x438/0x1110 [ 208.703137][T19026] ? selinux_file_ioctl+0x981/0xa10 [ 208.708336][T19026] ? lo_release+0x120/0x120 [ 208.712968][T19026] blkdev_ioctl+0x1d0/0x3f0 [ 208.717461][T19026] block_ioctl+0x6e/0x80 [ 208.721757][T19026] ? blkdev_iopoll+0x80/0x80 [ 208.726343][T19026] __se_sys_ioctl+0xcb/0x140 [ 208.730925][T19026] __x64_sys_ioctl+0x3f/0x50 [ 208.735508][T19026] do_syscall_64+0x44/0xa0 [ 208.739988][T19026] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 208.745879][T19026] RIP: 0033:0x7f46fee54697 [ 208.750330][T19026] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 208.750933][ C1] sd 0:0:1:0: tag#8141 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 208.769950][T19026] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.769970][T19026] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 208.769981][T19026] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 17:42:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5d7f8, 0x0) close(r0) [ 208.779780][ C1] sd 0:0:1:0: tag#8141 CDB: opcode=0xe5 (vendor) [ 208.788146][T19026] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 208.796117][ C1] sd 0:0:1:0: tag#8141 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 208.804145][T19026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 208.804158][T19026] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 208.810486][ C1] sd 0:0:1:0: tag#8141 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 208.852391][ C1] sd 0:0:1:0: tag#8141 CDB[20]: 80 19 [ 208.926815][T19026] loop3: detected capacity change from 0 to 1054 [ 208.957464][T19026] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:42:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5d800, 0x0) close(r0) 17:42:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:40 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 208.993266][T19026] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 209.017100][T19026] EXT4-fs (loop3): get root inode failed [ 209.022777][T19026] EXT4-fs (loop3): mount failed 17:42:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 32) 17:42:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 209.102804][T19060] loop4: detected capacity change from 0 to 1054 [ 209.118138][T19060] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 209.157333][T19066] FAULT_INJECTION: forcing a failure. [ 209.157333][T19066] name failslab, interval 1, probability 0, space 0, times 0 [ 209.169966][T19066] CPU: 0 PID: 19066 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 209.178722][T19066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.188770][T19066] Call Trace: [ 209.192047][T19066] dump_stack_lvl+0xd6/0x122 [ 209.196638][T19066] dump_stack+0x11/0x1b [ 209.200784][T19066] should_fail+0x23c/0x250 [ 209.205192][T19066] ? __kernfs_new_node+0x6a/0x330 [ 209.210287][T19066] __should_failslab+0x81/0x90 [ 209.215050][T19066] should_failslab+0x5/0x20 [ 209.219544][T19066] kmem_cache_alloc+0x4f/0x300 [ 209.224304][T19066] ? __down_write_common+0x42/0x830 [ 209.229498][T19066] __kernfs_new_node+0x6a/0x330 [ 209.234401][T19066] ? up_write+0x25/0xc0 [ 209.238646][T19066] kernfs_new_node+0x5b/0xd0 [ 209.243334][T19066] __kernfs_create_file+0x45/0x1a0 [ 209.248442][T19066] sysfs_add_file_mode_ns+0x1c1/0x250 [ 209.253797][T19066] internal_create_group+0x2f4/0x860 [ 209.259147][T19066] ? set_disk_ro+0x73/0x110 [ 209.263643][T19066] sysfs_create_group+0x1b/0x20 [ 209.268563][T19066] loop_configure+0xbcd/0xeb0 [ 209.273309][T19066] lo_ioctl+0x618/0x13e0 [ 209.277548][T19066] ? path_openat+0x18d4/0x1ec0 [ 209.282334][T19066] ? blkdev_common_ioctl+0x438/0x1110 [ 209.287774][T19066] ? selinux_file_ioctl+0x981/0xa10 [ 209.293029][T19066] ? lo_release+0x120/0x120 [ 209.297562][T19066] blkdev_ioctl+0x1d0/0x3f0 [ 209.302143][T19066] block_ioctl+0x6e/0x80 [ 209.306594][T19066] ? blkdev_iopoll+0x80/0x80 [ 209.311192][T19066] __se_sys_ioctl+0xcb/0x140 [ 209.315795][T19066] __x64_sys_ioctl+0x3f/0x50 [ 209.320380][T19066] do_syscall_64+0x44/0xa0 [ 209.324855][T19066] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 209.330774][T19066] RIP: 0033:0x7f46fee54697 [ 209.335178][T19066] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 209.354788][T19066] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.363253][T19066] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 209.371303][T19066] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 209.379405][T19066] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 209.387364][T19066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 209.395320][T19066] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 17:42:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 209.429427][T19066] loop3: detected capacity change from 0 to 1054 [ 209.455945][T19066] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:42:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5dff8, 0x0) close(r0) 17:42:40 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 209.526972][T19084] loop4: detected capacity change from 0 to 1054 [ 209.542189][T19066] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 209.561268][T19084] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 17:42:40 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 209.569819][ C1] sd 0:0:1:0: tag#27 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 209.579496][ C1] sd 0:0:1:0: tag#27 CDB: opcode=0xe5 (vendor) [ 209.585671][ C1] sd 0:0:1:0: tag#27 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 209.594536][ C1] sd 0:0:1:0: tag#27 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 209.603397][ C1] sd 0:0:1:0: tag#27 CDB[20]: 80 19 [ 209.607602][T19066] EXT4-fs (loop3): get root inode failed [ 209.614252][T19066] EXT4-fs (loop3): mount failed 17:42:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 33) [ 209.745395][T19117] loop4: detected capacity change from 0 to 1054 [ 209.765183][T19120] FAULT_INJECTION: forcing a failure. [ 209.765183][T19120] name failslab, interval 1, probability 0, space 0, times 0 [ 209.777876][T19120] CPU: 1 PID: 19120 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 17:42:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5e000, 0x0) close(r0) [ 209.786652][T19120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.796727][T19120] Call Trace: [ 209.800017][T19120] dump_stack_lvl+0xd6/0x122 [ 209.804636][T19120] dump_stack+0x11/0x1b [ 209.808863][T19120] should_fail+0x23c/0x250 [ 209.813277][T19120] ? __kernfs_new_node+0x6a/0x330 [ 209.818302][T19120] __should_failslab+0x81/0x90 [ 209.823063][T19120] should_failslab+0x5/0x20 [ 209.827711][T19120] kmem_cache_alloc+0x4f/0x300 [ 209.832477][T19120] ? __down_write_common+0x42/0x830 [ 209.837663][T19120] __kernfs_new_node+0x6a/0x330 [ 209.842502][T19120] ? up_write+0x25/0xc0 [ 209.846638][T19120] kernfs_new_node+0x5b/0xd0 [ 209.851257][T19120] __kernfs_create_file+0x45/0x1a0 [ 209.856420][T19120] sysfs_add_file_mode_ns+0x1c1/0x250 [ 209.861861][T19120] internal_create_group+0x2f4/0x860 [ 209.867130][T19120] ? set_disk_ro+0x73/0x110 [ 209.871659][T19120] sysfs_create_group+0x1b/0x20 [ 209.876491][T19120] loop_configure+0xbcd/0xeb0 [ 209.881199][T19120] lo_ioctl+0x618/0x13e0 [ 209.885424][T19120] ? path_openat+0x18d4/0x1ec0 [ 209.890177][T19120] ? blkdev_common_ioctl+0x438/0x1110 [ 209.895596][T19120] ? selinux_file_ioctl+0x981/0xa10 [ 209.900780][T19120] ? lo_release+0x120/0x120 [ 209.905284][T19120] blkdev_ioctl+0x1d0/0x3f0 [ 209.909772][T19120] block_ioctl+0x6e/0x80 [ 209.914021][T19120] ? blkdev_iopoll+0x80/0x80 [ 209.918598][T19120] __se_sys_ioctl+0xcb/0x140 [ 209.923181][T19120] __x64_sys_ioctl+0x3f/0x50 [ 209.927767][T19120] do_syscall_64+0x44/0xa0 [ 209.932175][T19120] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 209.938134][T19120] RIP: 0033:0x7f46fee54697 [ 209.942621][T19120] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 209.962252][T19120] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.970733][T19120] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 209.978752][T19120] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 209.986703][T19120] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 209.994654][T19120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 210.002697][T19120] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 210.024603][T19117] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 17:42:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x11, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 210.041543][T19120] loop3: detected capacity change from 0 to 1054 [ 210.063080][T19120] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 210.078060][T19120] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:42:41 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x11, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 210.106907][T19120] EXT4-fs (loop3): get root inode failed [ 210.112590][T19120] EXT4-fs (loop3): mount failed 17:42:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 34) 17:42:41 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5e7f6, 0x0) close(r0) [ 210.209682][T19143] loop4: detected capacity change from 0 to 1054 [ 210.243585][T19143] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 210.272766][ C0] sd 0:0:1:0: tag#12 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 210.282463][ C0] sd 0:0:1:0: tag#12 CDB: opcode=0xe5 (vendor) [ 210.288657][ C0] sd 0:0:1:0: tag#12 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 210.297522][ C0] sd 0:0:1:0: tag#12 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 210.306391][ C0] sd 0:0:1:0: tag#12 CDB[20]: 80 19 [ 210.321610][T19160] FAULT_INJECTION: forcing a failure. [ 210.321610][T19160] name failslab, interval 1, probability 0, space 0, times 0 [ 210.334245][T19160] CPU: 0 PID: 19160 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 210.343020][T19160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.353166][T19160] Call Trace: [ 210.356439][T19160] dump_stack_lvl+0xd6/0x122 [ 210.361911][T19160] dump_stack+0x11/0x1b [ 210.366172][T19160] should_fail+0x23c/0x250 [ 210.370687][T19160] ? __kernfs_new_node+0x6a/0x330 [ 210.375723][T19160] __should_failslab+0x81/0x90 [ 210.380531][T19160] should_failslab+0x5/0x20 [ 210.385036][T19160] kmem_cache_alloc+0x4f/0x300 [ 210.389789][T19160] ? __down_write_common+0x42/0x830 [ 210.394991][T19160] __kernfs_new_node+0x6a/0x330 [ 210.399848][T19160] ? up_write+0x25/0xc0 [ 210.404002][T19160] kernfs_new_node+0x5b/0xd0 [ 210.408666][T19160] __kernfs_create_file+0x45/0x1a0 [ 210.413776][T19160] sysfs_add_file_mode_ns+0x1c1/0x250 [ 210.419145][T19160] internal_create_group+0x2f4/0x860 [ 210.424536][T19160] ? set_disk_ro+0x73/0x110 [ 210.429049][T19160] sysfs_create_group+0x1b/0x20 [ 210.433899][T19160] loop_configure+0xbcd/0xeb0 [ 210.438580][T19160] lo_ioctl+0x618/0x13e0 [ 210.442829][T19160] ? path_openat+0x18d4/0x1ec0 [ 210.447664][T19160] ? blkdev_common_ioctl+0x438/0x1110 [ 210.453038][T19160] ? selinux_file_ioctl+0x981/0xa10 [ 210.458251][T19160] ? lo_release+0x120/0x120 [ 210.462788][T19160] blkdev_ioctl+0x1d0/0x3f0 [ 210.467290][T19160] block_ioctl+0x6e/0x80 [ 210.471530][T19160] ? blkdev_iopoll+0x80/0x80 [ 210.476152][T19160] __se_sys_ioctl+0xcb/0x140 [ 210.480740][T19160] __x64_sys_ioctl+0x3f/0x50 [ 210.485331][T19160] do_syscall_64+0x44/0xa0 [ 210.489755][T19160] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 210.495656][T19160] RIP: 0033:0x7f46fee54697 [ 210.500063][T19160] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:42:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5e800, 0x0) close(r0) [ 210.519665][T19160] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.528075][T19160] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 210.536039][T19160] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 210.544003][T19160] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 210.551973][T19160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 210.559956][T19160] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 17:42:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x12, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 210.584967][T19160] loop3: detected capacity change from 0 to 1054 [ 210.594780][T19160] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 210.604465][T19160] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 210.618120][T19160] EXT4-fs (loop3): get root inode failed [ 210.623838][T19160] EXT4-fs (loop3): mount failed 17:42:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:42:41 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x12, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 35) [ 210.723881][T19184] loop4: detected capacity change from 0 to 1054 [ 210.741299][T19189] loop3: detected capacity change from 0 to 1054 [ 210.765544][T19184] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 210.772215][T19189] FAULT_INJECTION: forcing a failure. [ 210.772215][T19189] name failslab, interval 1, probability 0, space 0, times 0 [ 210.784857][T19189] CPU: 1 PID: 19189 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 210.793651][T19189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.803707][T19189] Call Trace: [ 210.806979][T19189] dump_stack_lvl+0xd6/0x122 [ 210.811581][T19189] dump_stack+0x11/0x1b [ 210.815723][T19189] should_fail+0x23c/0x250 [ 210.820296][T19189] __should_failslab+0x81/0x90 [ 210.825070][T19189] ? kobject_uevent_env+0x1a7/0xc40 [ 210.830252][T19189] should_failslab+0x5/0x20 [ 210.834743][T19189] kmem_cache_alloc_trace+0x52/0x320 [ 210.840067][T19189] ? dev_uevent_filter+0x70/0x70 [ 210.844993][T19189] kobject_uevent_env+0x1a7/0xc40 [ 210.850023][T19189] ? internal_create_group+0x7d9/0x860 [ 210.855466][T19189] ? set_capacity_and_notify+0x1eb/0x200 [ 210.861082][T19189] kobject_uevent+0x18/0x20 [ 210.865583][T19189] loop_configure+0xce1/0xeb0 [ 210.870275][T19189] lo_ioctl+0x618/0x13e0 [ 210.874501][T19189] ? path_openat+0x18d4/0x1ec0 [ 210.879391][T19189] ? blkdev_common_ioctl+0x438/0x1110 [ 210.884746][T19189] ? selinux_file_ioctl+0x981/0xa10 [ 210.890047][T19189] ? lo_release+0x120/0x120 [ 210.894555][T19189] blkdev_ioctl+0x1d0/0x3f0 [ 210.899039][T19189] block_ioctl+0x6e/0x80 [ 210.903263][T19189] ? blkdev_iopoll+0x80/0x80 [ 210.907834][T19189] __se_sys_ioctl+0xcb/0x140 [ 210.912449][T19189] __x64_sys_ioctl+0x3f/0x50 [ 210.917054][T19189] do_syscall_64+0x44/0xa0 [ 210.921458][T19189] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 210.927350][T19189] RIP: 0033:0x7f46fee54697 [ 210.931823][T19189] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 210.951583][T19189] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:42:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5eff1, 0x0) close(r0) [ 210.960126][T19189] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 210.968079][T19189] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 210.976120][T19189] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 210.984099][T19189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 210.992157][T19189] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 17:42:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x13, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 211.025852][T19189] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 211.053332][T19189] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:42:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 211.149520][T19189] EXT4-fs (loop3): get root inode failed [ 211.155186][T19189] EXT4-fs (loop3): mount failed 17:42:42 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 211.202148][T19213] loop4: detected capacity change from 0 to 1054 17:42:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 36) 17:42:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000180)) 17:42:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x14, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5f000, 0x0) close(r0) [ 211.330276][ C0] sd 0:0:1:0: tag#1 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 211.339871][ C0] sd 0:0:1:0: tag#1 CDB: opcode=0xe5 (vendor) [ 211.345962][ C0] sd 0:0:1:0: tag#1 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 211.354731][ C0] sd 0:0:1:0: tag#1 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 211.363532][ C0] sd 0:0:1:0: tag#1 CDB[20]: 80 19 [ 211.366200][T19235] loop4: detected capacity change from 0 to 1054 [ 211.386827][T19237] loop3: detected capacity change from 0 to 1054 [ 211.388338][T19235] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 211.393195][T19237] FAULT_INJECTION: forcing a failure. [ 211.393195][T19237] name failslab, interval 1, probability 0, space 0, times 0 [ 211.402403][T19235] EXT4-fs (loop4): group descriptors corrupted! [ 211.414993][T19237] CPU: 0 PID: 19237 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 211.415016][T19237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.415026][T19237] Call Trace: [ 211.415032][T19237] dump_stack_lvl+0xd6/0x122 [ 211.415054][T19237] dump_stack+0x11/0x1b [ 211.452056][T19237] should_fail+0x23c/0x250 [ 211.456479][T19237] ? kzalloc+0x1d/0x30 [ 211.460555][T19237] __should_failslab+0x81/0x90 [ 211.465361][T19237] should_failslab+0x5/0x20 [ 211.469954][T19237] __kmalloc+0x6f/0x350 [ 211.474108][T19237] kzalloc+0x1d/0x30 [ 211.478000][T19237] kobject_get_path+0x7c/0x110 [ 211.482782][T19237] kobject_uevent_env+0x1be/0xc40 [ 211.487805][T19237] ? internal_create_group+0x7d9/0x860 [ 211.493259][T19237] ? set_capacity_and_notify+0x1eb/0x200 [ 211.498953][T19237] kobject_uevent+0x18/0x20 [ 211.503462][T19237] loop_configure+0xce1/0xeb0 [ 211.508145][T19237] lo_ioctl+0x618/0x13e0 [ 211.512430][T19237] ? path_openat+0x18d4/0x1ec0 [ 211.517192][T19237] ? blkdev_common_ioctl+0x438/0x1110 [ 211.522564][T19237] ? selinux_file_ioctl+0x981/0xa10 [ 211.527829][T19237] ? lo_release+0x120/0x120 [ 211.532333][T19237] blkdev_ioctl+0x1d0/0x3f0 [ 211.536835][T19237] block_ioctl+0x6e/0x80 [ 211.541087][T19237] ? blkdev_iopoll+0x80/0x80 [ 211.545677][T19237] __se_sys_ioctl+0xcb/0x140 [ 211.550286][T19237] __x64_sys_ioctl+0x3f/0x50 [ 211.554932][T19237] do_syscall_64+0x44/0xa0 [ 211.559352][T19237] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 211.565362][T19237] RIP: 0033:0x7f46fee54697 17:42:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5f7ee, 0x0) close(r0) [ 211.569769][T19237] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 211.589371][T19237] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.597780][T19237] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 211.605751][T19237] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 211.613801][T19237] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 211.621795][T19237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 211.629804][T19237] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 17:42:42 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x13, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000180)) 17:42:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 211.760509][T19264] loop4: detected capacity change from 0 to 1054 [ 211.793906][T19264] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 211.803229][T19264] EXT4-fs (loop4): group descriptors corrupted! 17:42:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5f800, 0x0) close(r0) [ 211.828185][T19237] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 211.847926][T19237] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 211.863011][T19237] EXT4-fs (loop3): get root inode failed [ 211.868684][T19237] EXT4-fs (loop3): mount failed 17:42:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000180)) 17:42:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x16, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:43 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 37) [ 211.909478][T19285] loop4: detected capacity change from 0 to 1054 [ 211.940886][T19285] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 211.950122][T19285] EXT4-fs (loop4): group descriptors corrupted! 17:42:43 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x14, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 211.973222][T19300] loop3: detected capacity change from 0 to 1054 [ 211.984756][ C0] sd 0:0:1:0: tag#46 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 211.994440][ C0] sd 0:0:1:0: tag#46 CDB: opcode=0xe5 (vendor) [ 212.000596][ C0] sd 0:0:1:0: tag#46 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 212.009478][ C0] sd 0:0:1:0: tag#46 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 212.018510][ C0] sd 0:0:1:0: tag#46 CDB[20]: 80 19 [ 212.032286][T19300] FAULT_INJECTION: forcing a failure. [ 212.032286][T19300] name failslab, interval 1, probability 0, space 0, times 0 [ 212.044909][T19300] CPU: 0 PID: 19300 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 212.053694][T19300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.063746][T19300] Call Trace: [ 212.067013][T19300] dump_stack_lvl+0xd6/0x122 [ 212.071606][T19300] dump_stack+0x11/0x1b [ 212.075765][T19300] should_fail+0x23c/0x250 [ 212.080170][T19300] __should_failslab+0x81/0x90 [ 212.084932][T19300] should_failslab+0x5/0x20 [ 212.089429][T19300] kmem_cache_alloc_node+0x61/0x2c0 [ 212.094651][T19300] ? __alloc_skb+0xed/0x420 [ 212.099230][T19300] __alloc_skb+0xed/0x420 [ 212.103559][T19300] alloc_uevent_skb+0x5b/0x120 [ 212.108376][T19300] kobject_uevent_env+0x863/0xc40 [ 212.113418][T19300] ? internal_create_group+0x7d9/0x860 [ 212.118879][T19300] ? set_capacity_and_notify+0x1eb/0x200 [ 212.124506][T19300] kobject_uevent+0x18/0x20 [ 212.129056][T19300] loop_configure+0xce1/0xeb0 [ 212.133808][T19300] lo_ioctl+0x618/0x13e0 [ 212.138052][T19300] ? path_openat+0x18d4/0x1ec0 [ 212.142888][T19300] ? blkdev_common_ioctl+0x438/0x1110 [ 212.148298][T19300] ? selinux_file_ioctl+0x981/0xa10 [ 212.153491][T19300] ? lo_release+0x120/0x120 [ 212.158040][T19300] blkdev_ioctl+0x1d0/0x3f0 [ 212.162653][T19300] block_ioctl+0x6e/0x80 [ 212.166885][T19300] ? blkdev_iopoll+0x80/0x80 [ 212.171467][T19300] __se_sys_ioctl+0xcb/0x140 [ 212.176120][T19300] __x64_sys_ioctl+0x3f/0x50 [ 212.180709][T19300] do_syscall_64+0x44/0xa0 [ 212.185129][T19300] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 212.191141][T19300] RIP: 0033:0x7f46fee54697 [ 212.195548][T19300] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 212.215163][T19300] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.223574][T19300] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 17:42:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, 0x0) [ 212.231628][T19300] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 212.239676][T19300] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 212.247639][T19300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 212.255611][T19300] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 17:42:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5ffe4, 0x0) close(r0) [ 212.289359][T19300] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 212.299087][T19300] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 212.312280][T19300] EXT4-fs (loop3): get root inode failed [ 212.317962][T19300] EXT4-fs (loop3): mount failed [ 212.321692][T19320] loop4: detected capacity change from 0 to 1054 17:42:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, 0x0) 17:42:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 38) [ 212.435312][T19334] loop3: detected capacity change from 0 to 1054 [ 212.456550][T19334] FAULT_INJECTION: forcing a failure. [ 212.456550][T19334] name failslab, interval 1, probability 0, space 0, times 0 [ 212.469461][T19334] CPU: 1 PID: 19334 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 212.478283][T19334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.488455][T19334] Call Trace: [ 212.491734][T19334] dump_stack_lvl+0xd6/0x122 [ 212.496323][T19334] dump_stack+0x11/0x1b [ 212.500498][T19334] should_fail+0x23c/0x250 [ 212.504915][T19334] __should_failslab+0x81/0x90 [ 212.509675][T19334] should_failslab+0x5/0x20 [ 212.514176][T19334] kmem_cache_alloc_node+0x61/0x2c0 [ 212.519363][T19334] ? __alloc_skb+0xed/0x420 [ 212.523874][T19334] __alloc_skb+0xed/0x420 [ 212.528197][T19334] alloc_uevent_skb+0x5b/0x120 [ 212.532961][T19334] kobject_uevent_env+0x863/0xc40 [ 212.537984][T19334] ? internal_create_group+0x7d9/0x860 [ 212.543440][T19334] ? set_capacity_and_notify+0x1eb/0x200 [ 212.549091][T19334] kobject_uevent+0x18/0x20 [ 212.553752][T19334] loop_configure+0xce1/0xeb0 [ 212.558481][T19334] lo_ioctl+0x618/0x13e0 [ 212.562837][T19334] ? path_openat+0x18d4/0x1ec0 [ 212.567788][T19334] ? blkdev_common_ioctl+0x438/0x1110 [ 212.573245][T19334] ? selinux_file_ioctl+0x981/0xa10 [ 212.578547][T19334] ? lo_release+0x120/0x120 [ 212.583046][T19334] blkdev_ioctl+0x1d0/0x3f0 [ 212.587545][T19334] block_ioctl+0x6e/0x80 [ 212.591847][T19334] ? blkdev_iopoll+0x80/0x80 [ 212.596490][T19334] __se_sys_ioctl+0xcb/0x140 [ 212.601071][T19334] __x64_sys_ioctl+0x3f/0x50 [ 212.605653][T19334] do_syscall_64+0x44/0xa0 [ 212.610145][T19334] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 212.616033][T19334] RIP: 0033:0x7f46fee54697 [ 212.620442][T19334] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 212.640048][T19334] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.648458][T19334] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 212.656473][T19334] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 212.664442][T19334] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 212.672439][T19334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 212.680435][T19334] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 212.691228][T19341] loop4: detected capacity change from 0 to 1054 [ 212.710486][T19334] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:42:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, 0x0) 17:42:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x60000, 0x0) close(r0) 17:42:44 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:44 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x17, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 212.738106][T19334] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 212.758222][T19334] EXT4-fs (loop3): get root inode failed [ 212.763879][T19334] EXT4-fs (loop3): mount failed [ 212.815170][ C0] sd 0:0:1:0: tag#7 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 212.824761][ C0] sd 0:0:1:0: tag#7 CDB: opcode=0xe5 (vendor) [ 212.830855][ C0] sd 0:0:1:0: tag#7 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 212.839645][ C0] sd 0:0:1:0: tag#7 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 212.848407][ C0] sd 0:0:1:0: tag#7 CDB[20]: 80 19 17:42:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 39) [ 212.886902][T19361] loop4: detected capacity change from 0 to 1054 17:42:44 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 212.954530][T19371] loop3: detected capacity change from 0 to 1054 [ 212.961400][T19371] FAULT_INJECTION: forcing a failure. [ 212.961400][T19371] name failslab, interval 1, probability 0, space 0, times 0 [ 212.974120][T19371] CPU: 1 PID: 19371 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 17:42:44 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 212.974142][T19371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 17:42:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x607e0, 0x0) close(r0) 17:42:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 40) [ 212.974151][T19371] Call Trace: [ 212.974158][T19371] dump_stack_lvl+0xd6/0x122 [ 212.974181][T19371] dump_stack+0x11/0x1b [ 212.974250][T19371] should_fail+0x23c/0x250 17:42:44 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x18, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 212.974266][T19371] ? skb_clone+0x12c/0x1f0 [ 212.974285][T19371] __should_failslab+0x81/0x90 [ 212.974308][T19371] should_failslab+0x5/0x20 [ 212.974326][T19371] kmem_cache_alloc+0x4f/0x300 [ 212.974341][T19371] skb_clone+0x12c/0x1f0 [ 212.974360][T19371] netlink_broadcast_filtered+0x4fd/0xb60 [ 212.974456][T19371] ? skb_put+0xb9/0xf0 [ 212.974525][T19371] netlink_broadcast+0x35/0x50 [ 212.974541][T19371] kobject_uevent_env+0x8c9/0xc40 [ 212.974567][T19371] ? internal_create_group+0x7d9/0x860 [ 212.974590][T19371] ? set_capacity_and_notify+0x1eb/0x200 [ 212.974682][T19371] kobject_uevent+0x18/0x20 [ 212.974705][T19371] loop_configure+0xce1/0xeb0 17:42:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 41) [ 212.974728][T19371] lo_ioctl+0x618/0x13e0 [ 212.974748][T19371] ? path_openat+0x18d4/0x1ec0 [ 212.974774][T19371] ? blkdev_common_ioctl+0x438/0x1110 [ 212.974869][T19371] ? selinux_file_ioctl+0x981/0xa10 [ 212.974890][T19371] ? lo_release+0x120/0x120 [ 212.974907][T19371] blkdev_ioctl+0x1d0/0x3f0 [ 212.974924][T19371] block_ioctl+0x6e/0x80 [ 212.974941][T19371] ? blkdev_iopoll+0x80/0x80 [ 212.974959][T19371] __se_sys_ioctl+0xcb/0x140 [ 212.974978][T19371] __x64_sys_ioctl+0x3f/0x50 [ 212.974998][T19371] do_syscall_64+0x44/0xa0 [ 212.975080][T19371] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 212.975136][T19371] RIP: 0033:0x7f46fee54697 [ 212.975151][T19371] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 212.975169][T19371] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.975187][T19371] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 212.975200][T19371] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 212.975213][T19371] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 212.975225][T19371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 17:42:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x60800, 0x0) close(r0) [ 212.975238][T19371] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 213.034809][ C1] sd 0:0:1:0: tag#51 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 213.034834][ C1] sd 0:0:1:0: tag#51 CDB: opcode=0xe5 (vendor) [ 213.034868][ C1] sd 0:0:1:0: tag#51 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 213.034888][ C1] sd 0:0:1:0: tag#51 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 213.034905][ C1] sd 0:0:1:0: tag#51 CDB[20]: 80 19 [ 213.128847][T19393] loop3: detected capacity change from 0 to 1054 [ 213.128879][T19393] FAULT_INJECTION: forcing a failure. [ 213.128879][T19393] name failslab, interval 1, probability 0, space 0, times 0 [ 213.128897][T19393] CPU: 1 PID: 19393 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 213.128915][T19393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.128925][T19393] Call Trace: [ 213.129002][T19393] dump_stack_lvl+0xd6/0x122 [ 213.129026][T19393] dump_stack+0x11/0x1b [ 213.129043][T19393] should_fail+0x23c/0x250 17:42:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x60e5e, 0x0) close(r0) [ 213.129060][T19393] ? skb_clone+0x12c/0x1f0 [ 213.129206][T19393] __should_failslab+0x81/0x90 [ 213.129225][T19393] should_failslab+0x5/0x20 [ 213.129248][T19393] kmem_cache_alloc+0x4f/0x300 [ 213.129268][T19393] skb_clone+0x12c/0x1f0 [ 213.129288][T19393] netlink_broadcast_filtered+0x4fd/0xb60 [ 213.129332][T19393] ? skb_put+0xb9/0xf0 [ 213.129351][T19393] netlink_broadcast+0x35/0x50 [ 213.129367][T19393] kobject_uevent_env+0x8c9/0xc40 [ 213.129452][T19393] ? internal_create_group+0x7d9/0x860 [ 213.129471][T19393] ? set_capacity_and_notify+0x1eb/0x200 [ 213.129489][T19393] kobject_uevent+0x18/0x20 [ 213.129516][T19393] loop_configure+0xce1/0xeb0 [ 213.129576][T19393] lo_ioctl+0x618/0x13e0 [ 213.129652][T19393] ? path_openat+0x18d4/0x1ec0 [ 213.129675][T19393] ? blkdev_common_ioctl+0x438/0x1110 [ 213.129723][T19393] ? selinux_file_ioctl+0x981/0xa10 [ 213.129743][T19393] ? lo_release+0x120/0x120 [ 213.129763][T19393] blkdev_ioctl+0x1d0/0x3f0 [ 213.129800][T19393] block_ioctl+0x6e/0x80 [ 213.129815][T19393] ? blkdev_iopoll+0x80/0x80 17:42:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x61000, 0x0) close(r0) [ 213.129829][T19393] __se_sys_ioctl+0xcb/0x140 [ 213.129845][T19393] __x64_sys_ioctl+0x3f/0x50 [ 213.129861][T19393] do_syscall_64+0x44/0xa0 [ 213.129910][T19393] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 213.129936][T19393] RIP: 0033:0x7f46fee54697 [ 213.129949][T19393] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 213.129965][T19393] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.129984][T19393] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 213.129995][T19393] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 213.130006][T19393] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 213.130018][T19393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 213.130028][T19393] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 213.138156][T19393] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 213.175840][T19393] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 213.176032][T19393] EXT4-fs (loop3): get root inode failed [ 213.176044][T19393] EXT4-fs (loop3): mount failed [ 213.272159][T19411] loop3: detected capacity change from 0 to 1054 [ 213.272322][T19411] FAULT_INJECTION: forcing a failure. [ 213.272322][T19411] name failslab, interval 1, probability 0, space 0, times 0 [ 213.272350][T19411] CPU: 0 PID: 19411 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 213.272373][T19411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.272383][T19411] Call Trace: [ 213.272389][T19411] dump_stack_lvl+0xd6/0x122 [ 213.272411][T19411] dump_stack+0x11/0x1b [ 213.272429][T19411] should_fail+0x23c/0x250 [ 213.272509][T19411] __should_failslab+0x81/0x90 [ 213.272530][T19411] ? call_usermodehelper_setup+0x71/0x190 [ 213.272556][T19411] should_failslab+0x5/0x20 [ 213.272577][T19411] kmem_cache_alloc_trace+0x52/0x320 [ 213.272598][T19411] call_usermodehelper_setup+0x71/0x190 [ 213.272661][T19411] ? add_uevent_var+0x1d0/0x1d0 [ 213.272685][T19411] kobject_uevent_env+0xb29/0xc40 [ 213.272749][T19411] ? internal_create_group+0x7d9/0x860 [ 213.272771][T19411] ? set_capacity_and_notify+0x1eb/0x200 [ 213.272792][T19411] kobject_uevent+0x18/0x20 [ 213.272816][T19411] loop_configure+0xce1/0xeb0 [ 213.272890][T19411] lo_ioctl+0x618/0x13e0 [ 213.272908][T19411] ? path_openat+0x18d4/0x1ec0 [ 213.272934][T19411] ? blkdev_common_ioctl+0x438/0x1110 [ 213.272954][T19411] ? selinux_file_ioctl+0x981/0xa10 [ 213.272977][T19411] ? lo_release+0x120/0x120 [ 213.272998][T19411] blkdev_ioctl+0x1d0/0x3f0 [ 213.273094][T19411] block_ioctl+0x6e/0x80 [ 213.273112][T19411] ? blkdev_iopoll+0x80/0x80 [ 213.273128][T19411] __se_sys_ioctl+0xcb/0x140 [ 213.273147][T19411] __x64_sys_ioctl+0x3f/0x50 [ 213.273165][T19411] do_syscall_64+0x44/0xa0 [ 213.273189][T19411] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 213.273217][T19411] RIP: 0033:0x7f46fee54697 [ 213.273275][T19411] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 213.273292][T19411] RSP: 002b:00007f46fcbcbf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.273311][T19411] RAX: ffffffffffffffda RBX: 00007f46fee9ecc0 RCX: 00007f46fee54697 [ 213.273324][T19411] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 213.273336][T19411] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 17:42:45 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x615ff, 0x0) close(r0) 17:42:45 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x16, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 213.273354][T19411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 213.273442][T19411] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 213.293685][T19411] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 213.958913][T19411] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 213.971644][T19411] EXT4-fs (loop3): get root inode failed [ 213.977299][T19411] EXT4-fs (loop3): mount failed 17:42:45 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:45 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 42) [ 214.054250][ C0] sd 0:0:1:0: tag#43 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 214.064026][ C0] sd 0:0:1:0: tag#43 CDB: opcode=0xe5 (vendor) [ 214.070196][ C0] sd 0:0:1:0: tag#43 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 214.079092][ C0] sd 0:0:1:0: tag#43 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 214.086528][T19445] loop3: detected capacity change from 0 to 1054 [ 214.087951][ C0] sd 0:0:1:0: tag#43 CDB[20]: 80 19 [ 214.098764][T19445] FAULT_INJECTION: forcing a failure. [ 214.098764][T19445] name failslab, interval 1, probability 0, space 0, times 0 [ 214.112006][T19445] CPU: 1 PID: 19445 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 214.120765][T19445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.130811][T19445] Call Trace: [ 214.134079][T19445] dump_stack_lvl+0xd6/0x122 [ 214.138671][T19445] dump_stack+0x11/0x1b [ 214.142828][T19445] should_fail+0x23c/0x250 [ 214.147235][T19445] ? getname_flags+0x84/0x3f0 [ 214.151923][T19445] __should_failslab+0x81/0x90 [ 214.156793][T19445] should_failslab+0x5/0x20 [ 214.161301][T19445] kmem_cache_alloc+0x4f/0x300 [ 214.166063][T19445] getname_flags+0x84/0x3f0 [ 214.170568][T19445] ? switch_fpu_return+0xa/0x10 [ 214.175416][T19445] __x64_sys_mkdir+0x31/0x50 [ 214.180094][T19445] do_syscall_64+0x44/0xa0 [ 214.184540][T19445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 214.190438][T19445] RIP: 0033:0x7f46fee539e7 [ 214.194847][T19445] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 214.214451][T19445] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 214.222854][T19445] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee539e7 [ 214.230812][T19445] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000040 [ 214.238776][T19445] RBP: 00007f46fcbcc040 R08: 0000000000000000 R09: ffffffffffffffff [ 214.246753][T19445] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 214.254774][T19445] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 [ 214.302991][ C0] sd 0:0:1:0: tag#44 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 214.312652][ C0] sd 0:0:1:0: tag#44 CDB: opcode=0xe5 (vendor) [ 214.318831][ C0] sd 0:0:1:0: tag#44 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 214.327687][ C0] sd 0:0:1:0: tag#44 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 214.336541][ C0] sd 0:0:1:0: tag#44 CDB[20]: 80 19 17:42:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x61800, 0x0) close(r0) 17:42:45 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 43) 17:42:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x61bea, 0x0) close(r0) [ 214.672361][T19479] loop3: detected capacity change from 0 to 1054 [ 214.695027][T19479] FAULT_INJECTION: forcing a failure. [ 214.695027][T19479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.708144][T19479] CPU: 1 PID: 19479 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 214.717002][T19479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.727230][T19479] Call Trace: [ 214.730505][T19479] dump_stack_lvl+0xd6/0x122 [ 214.735100][T19479] dump_stack+0x11/0x1b [ 214.739255][T19479] should_fail+0x23c/0x250 [ 214.743720][T19479] should_fail_usercopy+0x16/0x20 [ 214.748752][T19479] strncpy_from_user+0x21/0x250 [ 214.753674][T19479] getname_flags+0xb8/0x3f0 [ 214.758219][T19479] __x64_sys_mkdir+0x31/0x50 [ 214.762818][T19479] do_syscall_64+0x44/0xa0 [ 214.767291][T19479] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 214.773290][T19479] RIP: 0033:0x7f46fee539e7 [ 214.777700][T19479] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 214.797487][T19479] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 17:42:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:46 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x17, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 214.797507][T19479] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee539e7 [ 214.797517][T19479] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000040 [ 214.797527][T19479] RBP: 00007f46fcbcc040 R08: 0000000000000000 R09: ffffffffffffffff [ 214.797609][T19479] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 214.797619][T19479] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 17:42:46 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x61e72, 0x0) close(r0) 17:42:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 44) 17:42:46 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:46 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x18, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 215.031267][T19512] loop3: detected capacity change from 0 to 1054 [ 215.046657][ C1] sd 0:0:1:0: tag#42 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 215.056327][ C1] sd 0:0:1:0: tag#42 CDB: opcode=0xe5 (vendor) [ 215.062480][ C1] sd 0:0:1:0: tag#42 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 215.071365][ C1] sd 0:0:1:0: tag#42 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 215.080227][ C1] sd 0:0:1:0: tag#42 CDB[20]: 80 19 [ 215.092487][T19512] FAULT_INJECTION: forcing a failure. [ 215.092487][T19512] name failslab, interval 1, probability 0, space 0, times 0 [ 215.105119][T19512] CPU: 1 PID: 19512 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 215.113872][T19512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.123921][T19512] Call Trace: [ 215.127191][T19512] dump_stack_lvl+0xd6/0x122 [ 215.131784][T19512] dump_stack+0x11/0x1b [ 215.136001][T19512] should_fail+0x23c/0x250 [ 215.140417][T19512] ? __d_alloc+0x36/0x370 [ 215.144746][T19512] __should_failslab+0x81/0x90 [ 215.149511][T19512] should_failslab+0x5/0x20 [ 215.154125][T19512] kmem_cache_alloc+0x4f/0x300 [ 215.158956][T19512] __d_alloc+0x36/0x370 [ 215.163147][T19512] d_alloc+0x2a/0x130 [ 215.167262][T19512] __lookup_hash+0x8f/0x180 [ 215.171766][T19512] filename_create+0xfc/0x270 [ 215.176487][T19512] do_mkdirat+0x53/0x2c0 [ 215.180816][T19512] __x64_sys_mkdir+0x40/0x50 [ 215.185402][T19512] do_syscall_64+0x44/0xa0 [ 215.189814][T19512] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 215.195762][T19512] RIP: 0033:0x7f46fee539e7 [ 215.200170][T19512] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 215.219769][T19512] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 17:42:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x62000, 0x0) close(r0) 17:42:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 45) [ 215.228183][T19512] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee539e7 [ 215.236152][T19512] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000040 [ 215.244164][T19512] RBP: 00007f46fcbcc040 R08: 0000000000000000 R09: ffffffffffffffff [ 215.252248][T19512] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 215.260263][T19512] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 17:42:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1d, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:46 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:46 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 215.384280][T19540] loop3: detected capacity change from 0 to 1054 [ 215.399995][ C0] sd 0:0:1:0: tag#108 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 215.409834][ C0] sd 0:0:1:0: tag#108 CDB: opcode=0xe5 (vendor) [ 215.416119][ C0] sd 0:0:1:0: tag#108 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 215.425061][ C0] sd 0:0:1:0: tag#108 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 215.434022][ C0] sd 0:0:1:0: tag#108 CDB[20]: 80 19 [ 215.445873][T19540] FAULT_INJECTION: forcing a failure. [ 215.445873][T19540] name failslab, interval 1, probability 0, space 0, times 0 [ 215.458495][T19540] CPU: 0 PID: 19540 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 215.467256][T19540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.477349][T19540] Call Trace: [ 215.480668][T19540] dump_stack_lvl+0xd6/0x122 [ 215.485350][T19540] dump_stack+0x11/0x1b [ 215.489502][T19540] should_fail+0x23c/0x250 [ 215.493933][T19540] ? ext4_alloc_inode+0x27/0x300 [ 215.498866][T19540] __should_failslab+0x81/0x90 [ 215.503767][T19540] ? set_qf_name+0x230/0x230 [ 215.508460][T19540] should_failslab+0x5/0x20 [ 215.513017][T19540] kmem_cache_alloc+0x4f/0x300 [ 215.517824][T19540] ? ebitmap_destroy+0x91/0xa0 [ 215.522641][T19540] ? set_qf_name+0x230/0x230 [ 215.527223][T19540] ext4_alloc_inode+0x27/0x300 [ 215.527255][ C1] sd 0:0:1:0: tag#2 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 215.531997][T19540] ? set_qf_name+0x230/0x230 [ 215.541572][ C1] sd 0:0:1:0: tag#2 CDB: opcode=0xe5 (vendor) [ 215.546110][T19540] new_inode_pseudo+0x38/0x1c0 [ 215.552169][ C1] sd 0:0:1:0: tag#2 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 215.552187][ C1] sd 0:0:1:0: tag#2 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 215.556914][T19540] new_inode+0x21/0x120 [ 215.565688][ C1] sd 0:0:1:0: tag#2 CDB[20]: 80 19 [ 215.574374][T19540] __ext4_new_inode+0x13f/0x2fd0 [ 215.588545][T19540] ? __dquot_initialize+0x13d/0x7f0 [ 215.593748][T19540] ext4_mkdir+0x28a/0x760 [ 215.598248][T19540] vfs_mkdir+0x2c3/0x3e0 [ 215.602495][T19540] do_mkdirat+0x12e/0x2c0 [ 215.606844][T19540] __x64_sys_mkdir+0x40/0x50 [ 215.611437][T19540] do_syscall_64+0x44/0xa0 [ 215.615852][T19540] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 215.621780][T19540] RIP: 0033:0x7f46fee539e7 [ 215.626182][T19540] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 215.645829][T19540] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 215.654257][T19540] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee539e7 [ 215.662289][T19540] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000040 [ 215.670295][T19540] RBP: 00007f46fcbcc040 R08: 0000000000000000 R09: ffffffffffffffff 17:42:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x62200, 0x0) close(r0) 17:42:46 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 215.678290][T19540] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 215.686253][T19540] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 17:42:46 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 46) [ 215.925416][ C0] sd 0:0:1:0: tag#109 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 215.935196][ C0] sd 0:0:1:0: tag#109 CDB: opcode=0xe5 (vendor) [ 215.941443][ C0] sd 0:0:1:0: tag#109 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 215.942209][T19575] loop3: detected capacity change from 0 to 1054 [ 215.950511][ C0] sd 0:0:1:0: tag#109 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 215.965774][ C0] sd 0:0:1:0: tag#109 CDB[20]: 80 19 [ 215.985772][T19575] FAULT_INJECTION: forcing a failure. [ 215.985772][T19575] name failslab, interval 1, probability 0, space 0, times 0 [ 215.998410][T19575] CPU: 1 PID: 19575 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 216.007172][T19575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.017348][T19575] Call Trace: [ 216.020621][T19575] dump_stack_lvl+0xd6/0x122 [ 216.025272][T19575] dump_stack+0x11/0x1b [ 216.029434][T19575] should_fail+0x23c/0x250 [ 216.033848][T19575] ? security_inode_alloc+0x30/0x180 [ 216.039128][T19575] __should_failslab+0x81/0x90 [ 216.043899][T19575] should_failslab+0x5/0x20 [ 216.048405][T19575] kmem_cache_alloc+0x4f/0x300 [ 216.053177][T19575] security_inode_alloc+0x30/0x180 [ 216.058329][T19575] inode_init_always+0x20b/0x430 [ 216.063285][T19575] ? set_qf_name+0x230/0x230 [ 216.063309][T19575] new_inode_pseudo+0x73/0x1c0 [ 216.063336][T19575] new_inode+0x21/0x120 [ 216.076800][T19575] __ext4_new_inode+0x13f/0x2fd0 [ 216.081746][T19575] ? __dquot_initialize+0x13d/0x7f0 [ 216.087035][T19575] ext4_mkdir+0x28a/0x760 [ 216.091384][T19575] vfs_mkdir+0x2c3/0x3e0 [ 216.095632][T19575] do_mkdirat+0x12e/0x2c0 [ 216.100039][T19575] __x64_sys_mkdir+0x40/0x50 [ 216.104713][T19575] do_syscall_64+0x44/0xa0 [ 216.109133][T19575] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 216.115039][T19575] RIP: 0033:0x7f46fee539e7 [ 216.119531][T19575] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 216.139136][T19575] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 216.147556][T19575] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee539e7 [ 216.155548][T19575] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000040 [ 216.163526][T19575] RBP: 00007f46fcbcc040 R08: 0000000000000000 R09: ffffffffffffffff [ 216.171555][T19575] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 17:42:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x623ff, 0x0) close(r0) 17:42:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x625fe, 0x0) close(r0) [ 216.179880][T19575] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 17:42:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x627f2, 0x0) close(r0) 17:42:47 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:47 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:47 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 47) 17:42:47 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 216.340482][T19607] loop3: detected capacity change from 0 to 1054 [ 216.379612][T19607] FAULT_INJECTION: forcing a failure. [ 216.379612][T19607] name failslab, interval 1, probability 0, space 0, times 0 [ 216.392288][T19607] CPU: 1 PID: 19607 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 216.401095][T19607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.411166][T19607] Call Trace: [ 216.414446][T19607] dump_stack_lvl+0xd6/0x122 [ 216.419151][T19607] dump_stack+0x11/0x1b [ 216.423313][T19607] should_fail+0x23c/0x250 [ 216.427729][T19607] ? security_inode_alloc+0x30/0x180 [ 216.433182][T19607] __should_failslab+0x81/0x90 [ 216.437952][T19607] should_failslab+0x5/0x20 [ 216.442461][T19607] kmem_cache_alloc+0x4f/0x300 [ 216.447274][T19607] security_inode_alloc+0x30/0x180 [ 216.452398][T19607] inode_init_always+0x20b/0x430 [ 216.457375][T19607] ? set_qf_name+0x230/0x230 [ 216.461967][T19607] new_inode_pseudo+0x73/0x1c0 [ 216.466735][T19607] new_inode+0x21/0x120 [ 216.470914][T19607] __ext4_new_inode+0x13f/0x2fd0 [ 216.475851][T19607] ? __dquot_initialize+0x13d/0x7f0 [ 216.481044][T19607] ext4_mkdir+0x28a/0x760 [ 216.485428][T19607] vfs_mkdir+0x2c3/0x3e0 [ 216.489671][T19607] do_mkdirat+0x12e/0x2c0 [ 216.494010][T19607] __x64_sys_mkdir+0x40/0x50 [ 216.498657][T19607] do_syscall_64+0x44/0xa0 [ 216.503376][T19607] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 216.509283][T19607] RIP: 0033:0x7f46fee539e7 [ 216.513693][T19607] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 216.533436][T19607] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 216.541946][T19607] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee539e7 [ 216.549901][T19607] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000040 [ 216.557860][T19607] RBP: 00007f46fcbcc040 R08: 0000000000000000 R09: ffffffffffffffff [ 216.565815][T19607] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 216.573773][T19607] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 17:42:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x62800, 0x0) close(r0) 17:42:47 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:47 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 216.756036][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 216.756066][ C0] sd 0:0:1:0: tag#49 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 216.772355][ C0] sd 0:0:1:0: tag#49 CDB: opcode=0xe5 (vendor) [ 216.778541][ C0] sd 0:0:1:0: tag#49 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 216.787447][ C0] sd 0:0:1:0: tag#49 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 216.796311][ C0] sd 0:0:1:0: tag#49 CDB[20]: 80 19 17:42:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 48) 17:42:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x629ed, 0x0) close(r0) [ 216.885524][T19646] loop3: detected capacity change from 0 to 1054 [ 216.895014][T19646] FAULT_INJECTION: forcing a failure. [ 216.895014][T19646] name failslab, interval 1, probability 0, space 0, times 0 17:42:48 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x21, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 216.907737][T19646] CPU: 1 PID: 19646 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 216.907759][T19646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 17:42:48 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 49) [ 216.907771][T19646] Call Trace: [ 216.907777][T19646] dump_stack_lvl+0xd6/0x122 [ 216.907809][T19646] dump_stack+0x11/0x1b [ 216.907825][T19646] should_fail+0x23c/0x250 [ 216.907841][T19646] ? kcalloc+0x32/0x50 [ 216.907881][T19646] __should_failslab+0x81/0x90 [ 216.907899][T19646] should_failslab+0x5/0x20 [ 216.907917][T19646] __kmalloc+0x6f/0x350 [ 216.907933][T19646] ? __crc32c_le_base+0x250/0x350 17:42:48 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 50) [ 216.907987][T19646] kcalloc+0x32/0x50 [ 216.908007][T19646] ext4_find_extent+0x21c/0x7f0 17:42:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x62bd5, 0x0) close(r0) [ 216.908030][T19646] ext4_ext_map_blocks+0x115/0x1ff0 [ 216.908080][T19646] ? ext4_inode_csum+0x410/0x490 [ 216.908165][T19646] ? ext4_es_lookup_extent+0x206/0x490 [ 216.908190][T19646] ext4_map_blocks+0x1cf/0xf00 17:42:48 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x22, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 216.908212][T19646] ext4_getblk+0xc6/0x3e0 [ 216.908231][T19646] ext4_bread+0x28/0x100 [ 216.908281][T19646] ext4_append+0xd1/0x1c0 17:42:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 51) [ 216.908300][T19646] ext4_init_new_dir+0x177/0x500 [ 216.908319][T19646] ext4_mkdir+0x329/0x760 [ 216.908347][T19646] vfs_mkdir+0x2c3/0x3e0 [ 216.908443][T19646] do_mkdirat+0x12e/0x2c0 [ 216.908466][T19646] __x64_sys_mkdir+0x40/0x50 [ 216.908527][T19646] do_syscall_64+0x44/0xa0 [ 216.908586][T19646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 216.908611][T19646] RIP: 0033:0x7f46fee539e7 [ 216.908624][T19646] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 216.908640][T19646] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 216.908658][T19646] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee539e7 [ 216.908687][T19646] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000040 [ 216.908698][T19646] RBP: 00007f46fcbcc040 R08: 0000000000000000 R09: ffffffffffffffff [ 216.908708][T19646] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 216.908719][T19646] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 [ 216.975330][T19646] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 216.979550][T19646] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 216.979740][T19646] EXT4-fs (loop3): get root inode failed [ 216.979751][T19646] EXT4-fs (loop3): mount failed [ 217.060932][T19666] loop3: detected capacity change from 0 to 1054 [ 217.061491][T19666] FAULT_INJECTION: forcing a failure. [ 217.061491][T19666] name failslab, interval 1, probability 0, space 0, times 0 [ 217.061510][T19666] CPU: 1 PID: 19666 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 217.061528][T19666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.061556][T19666] Call Trace: [ 217.061564][T19666] dump_stack_lvl+0xd6/0x122 [ 217.061589][T19666] dump_stack+0x11/0x1b [ 217.061606][T19666] should_fail+0x23c/0x250 [ 217.061622][T19666] ? __es_insert_extent+0x51f/0xe70 [ 217.061639][T19666] __should_failslab+0x81/0x90 [ 217.061657][T19666] should_failslab+0x5/0x20 [ 217.061720][T19666] kmem_cache_alloc+0x4f/0x300 [ 217.061737][T19666] ? __getblk_gfp+0x3f/0x590 [ 217.061758][T19666] __es_insert_extent+0x51f/0xe70 [ 217.061840][T19666] ext4_es_insert_extent+0x1cb/0x1950 [ 217.061860][T19666] ext4_ext_map_blocks+0x100a/0x1ff0 [ 217.061958][T19666] ext4_map_blocks+0x1cf/0xf00 [ 217.061976][T19666] ext4_getblk+0xc6/0x3e0 [ 217.061994][T19666] ext4_bread+0x28/0x100 [ 217.062013][T19666] ext4_append+0xd1/0x1c0 [ 217.062040][T19666] ext4_init_new_dir+0x177/0x500 [ 217.062060][T19666] ext4_mkdir+0x329/0x760 [ 217.062080][T19666] vfs_mkdir+0x2c3/0x3e0 [ 217.062105][T19666] do_mkdirat+0x12e/0x2c0 [ 217.062128][T19666] __x64_sys_mkdir+0x40/0x50 [ 217.062223][T19666] do_syscall_64+0x44/0xa0 [ 217.062275][T19666] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 217.062378][T19666] RIP: 0033:0x7f46fee539e7 [ 217.062393][T19666] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 217.062411][T19666] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 217.062430][T19666] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee539e7 [ 217.062456][T19666] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000040 [ 217.062466][T19666] RBP: 00007f46fcbcc040 R08: 0000000000000000 R09: ffffffffffffffff [ 217.062479][T19666] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 217.062491][T19666] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 [ 217.075399][T19666] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 217.090050][T19666] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 217.090189][T19666] EXT4-fs (loop3): get root inode failed [ 217.090198][T19666] EXT4-fs (loop3): mount failed [ 217.157595][T19678] loop3: detected capacity change from 0 to 1054 [ 217.165603][T19678] FAULT_INJECTION: forcing a failure. [ 217.165603][T19678] name failslab, interval 1, probability 0, space 0, times 0 [ 217.165626][T19678] CPU: 1 PID: 19678 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 217.165647][T19678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.165657][T19678] Call Trace: [ 217.165664][T19678] dump_stack_lvl+0xd6/0x122 [ 217.165688][T19678] dump_stack+0x11/0x1b [ 217.165778][T19678] should_fail+0x23c/0x250 [ 217.165908][T19678] ? kcalloc+0x32/0x50 [ 217.165931][T19678] __should_failslab+0x81/0x90 [ 217.165951][T19678] should_failslab+0x5/0x20 [ 217.165972][T19678] __kmalloc+0x6f/0x350 [ 217.166032][T19678] kcalloc+0x32/0x50 [ 217.166055][T19678] ext4_find_extent+0x21c/0x7f0 [ 217.166145][T19678] ? kfree+0xf8/0x1d0 [ 217.166160][T19678] ext4_ext_map_blocks+0x115/0x1ff0 [ 217.166179][T19678] ext4_map_blocks+0x71e/0xf00 [ 217.166201][T19678] ext4_getblk+0xc6/0x3e0 [ 217.166219][T19678] ext4_bread+0x28/0x100 [ 217.166237][T19678] ext4_append+0xd1/0x1c0 [ 217.166256][T19678] ext4_init_new_dir+0x177/0x500 [ 217.166297][T19678] ext4_mkdir+0x329/0x760 [ 217.166316][T19678] vfs_mkdir+0x2c3/0x3e0 [ 217.166339][T19678] do_mkdirat+0x12e/0x2c0 [ 217.166362][T19678] __x64_sys_mkdir+0x40/0x50 [ 217.166414][T19678] do_syscall_64+0x44/0xa0 [ 217.166437][T19678] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 217.166463][T19678] RIP: 0033:0x7f46fee539e7 [ 217.166477][T19678] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 217.166493][T19678] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 217.166511][T19678] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee539e7 [ 217.166540][T19678] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000040 [ 217.166552][T19678] RBP: 00007f46fcbcc040 R08: 0000000000000000 R09: ffffffffffffffff [ 217.166563][T19678] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 217.166574][T19678] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 [ 217.278315][T19695] loop3: detected capacity change from 0 to 1054 [ 217.279282][T19695] FAULT_INJECTION: forcing a failure. [ 217.279282][T19695] name failslab, interval 1, probability 0, space 0, times 0 [ 217.279321][T19695] CPU: 1 PID: 19695 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 217.279393][T19695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.279404][T19695] Call Trace: [ 217.279411][T19695] dump_stack_lvl+0xd6/0x122 [ 217.279437][T19695] dump_stack+0x11/0x1b [ 217.279465][T19695] should_fail+0x23c/0x250 [ 217.279481][T19695] ? ext4_mb_new_blocks+0x317/0x1fc0 [ 217.279498][T19695] __should_failslab+0x81/0x90 [ 217.279518][T19695] should_failslab+0x5/0x20 [ 217.279537][T19695] kmem_cache_alloc+0x4f/0x300 [ 217.279588][T19695] ext4_mb_new_blocks+0x317/0x1fc0 [ 217.279658][T19695] ? ext4_find_extent+0x6cf/0x7f0 [ 217.279682][T19695] ? ext4_ext_search_right+0x300/0x540 [ 217.279699][T19695] ? ext4_inode_to_goal_block+0x1bd/0x1d0 [ 217.279767][T19695] ext4_ext_map_blocks+0x15ed/0x1ff0 [ 217.279784][T19695] ext4_map_blocks+0x71e/0xf00 [ 217.279803][T19695] ext4_getblk+0xc6/0x3e0 [ 217.279821][T19695] ext4_bread+0x28/0x100 [ 217.279843][T19695] ext4_append+0xd1/0x1c0 [ 217.279880][T19695] ext4_init_new_dir+0x177/0x500 [ 217.279971][T19695] ext4_mkdir+0x329/0x760 [ 217.279990][T19695] vfs_mkdir+0x2c3/0x3e0 [ 217.280016][T19695] do_mkdirat+0x12e/0x2c0 [ 217.280036][T19695] __x64_sys_mkdir+0x40/0x50 [ 217.280056][T19695] do_syscall_64+0x44/0xa0 [ 217.280106][T19695] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 217.280129][T19695] RIP: 0033:0x7f46fee539e7 [ 217.280141][T19695] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 217.280156][T19695] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 217.280176][T19695] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee539e7 [ 217.280187][T19695] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000040 [ 217.280197][T19695] RBP: 00007f46fcbcc040 R08: 0000000000000000 R09: ffffffffffffffff [ 217.280209][T19695] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 217.280219][T19695] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 17:42:49 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 17:42:49 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1d, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 52) 17:42:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x62dbd, 0x0) close(r0) 17:42:49 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x23, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:49 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 218.287615][ C0] sd 0:0:1:0: tag#32 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 218.297299][ C0] sd 0:0:1:0: tag#32 CDB: opcode=0xe5 (vendor) [ 218.303579][ C0] sd 0:0:1:0: tag#32 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 218.312447][ C0] sd 0:0:1:0: tag#32 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 218.321288][ C0] sd 0:0:1:0: tag#32 CDB[20]: 80 19 [ 218.334472][T19724] loop3: detected capacity change from 0 to 1054 [ 218.360123][T19724] FAULT_INJECTION: forcing a failure. [ 218.360123][T19724] name failslab, interval 1, probability 0, space 0, times 0 [ 218.372756][T19724] CPU: 0 PID: 19724 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 218.381550][T19724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.391627][T19724] Call Trace: [ 218.394894][T19724] dump_stack_lvl+0xd6/0x122 [ 218.399556][T19724] dump_stack+0x11/0x1b [ 218.403708][T19724] should_fail+0x23c/0x250 [ 218.408193][T19724] ? ext4_mb_new_blocks+0x73f/0x1fc0 [ 218.413537][T19724] __should_failslab+0x81/0x90 [ 218.418375][T19724] should_failslab+0x5/0x20 [ 218.422908][T19724] kmem_cache_alloc+0x4f/0x300 [ 218.427695][T19724] ext4_mb_new_blocks+0x73f/0x1fc0 [ 218.432804][T19724] ? ext4_find_extent+0x6cf/0x7f0 [ 218.437835][T19724] ? ext4_ext_search_right+0x300/0x540 [ 218.443411][T19724] ? ext4_inode_to_goal_block+0x1bd/0x1d0 [ 218.449193][T19724] ext4_ext_map_blocks+0x15ed/0x1ff0 [ 218.454478][T19724] ext4_map_blocks+0x71e/0xf00 [ 218.459250][T19724] ext4_getblk+0xc6/0x3e0 [ 218.463584][T19724] ext4_bread+0x28/0x100 [ 218.467829][T19724] ext4_append+0xd1/0x1c0 [ 218.472194][T19724] ext4_init_new_dir+0x177/0x500 [ 218.477159][T19724] ext4_mkdir+0x329/0x760 [ 218.481530][T19724] vfs_mkdir+0x2c3/0x3e0 [ 218.485779][T19724] do_mkdirat+0x12e/0x2c0 [ 218.490105][T19724] __x64_sys_mkdir+0x40/0x50 [ 218.494700][T19724] do_syscall_64+0x44/0xa0 [ 218.499130][T19724] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 218.505032][T19724] RIP: 0033:0x7f46fee539e7 17:42:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x62efe, 0x0) close(r0) [ 218.509437][T19724] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 218.529052][T19724] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 218.537253][ C1] sd 0:0:1:0: tag#56 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 218.537460][T19724] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee539e7 [ 218.547107][ C1] sd 0:0:1:0: tag#56 CDB: opcode=0xe5 (vendor) [ 218.555019][T19724] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000040 [ 218.555033][T19724] RBP: 00007f46fcbcc040 R08: 0000000000000000 R09: ffffffffffffffff [ 218.555046][T19724] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 218.561178][ C1] sd 0:0:1:0: tag#56 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 218.569228][T19724] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 [ 218.577197][ C1] sd 0:0:1:0: tag#56 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 218.610798][ C1] sd 0:0:1:0: tag#56 CDB[20]: 80 19 17:42:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 53) [ 218.682893][T19746] loop3: detected capacity change from 0 to 1054 [ 218.696696][T19746] FAULT_INJECTION: forcing a failure. [ 218.696696][T19746] name failslab, interval 1, probability 0, space 0, times 0 [ 218.709330][T19746] CPU: 0 PID: 19746 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 218.718086][T19746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.728133][T19746] Call Trace: [ 218.731553][T19746] dump_stack_lvl+0xd6/0x122 [ 218.736180][T19746] dump_stack+0x11/0x1b [ 218.740329][T19746] should_fail+0x23c/0x250 [ 218.744834][T19746] ? __es_insert_extent+0x51f/0xe70 [ 218.750093][T19746] __should_failslab+0x81/0x90 [ 218.754854][T19746] should_failslab+0x5/0x20 [ 218.759434][T19746] kmem_cache_alloc+0x4f/0x300 [ 218.764212][T19746] __es_insert_extent+0x51f/0xe70 [ 218.769266][T19746] ext4_es_insert_extent+0x1cb/0x1950 [ 218.774632][T19746] ext4_map_blocks+0xa5d/0xf00 17:42:49 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:49 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x24, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:49 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x63000, 0x0) close(r0) [ 218.779394][T19746] ext4_getblk+0xc6/0x3e0 [ 218.783728][T19746] ext4_bread+0x28/0x100 [ 218.788031][T19746] ext4_append+0xd1/0x1c0 [ 218.792383][T19746] ext4_init_new_dir+0x177/0x500 [ 218.797390][T19746] ext4_mkdir+0x329/0x760 [ 218.801917][T19746] vfs_mkdir+0x2c3/0x3e0 [ 218.806165][T19746] do_mkdirat+0x12e/0x2c0 [ 218.810565][T19746] __x64_sys_mkdir+0x40/0x50 [ 218.815154][T19746] do_syscall_64+0x44/0xa0 [ 218.819571][T19746] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 218.825509][T19746] RIP: 0033:0x7f46fee539e7 [ 218.829919][T19746] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 218.849622][T19746] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 218.858090][T19746] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee539e7 [ 218.866109][T19746] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000040 [ 218.874076][T19746] RBP: 00007f46fcbcc040 R08: 0000000000000000 R09: ffffffffffffffff [ 218.882046][T19746] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 218.890007][T19746] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 17:42:49 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) [ 218.971476][ C1] sd 0:0:1:0: tag#15 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 218.972012][ C0] sd 0:0:1:0: tag#16 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 218.981158][ C1] sd 0:0:1:0: tag#15 CDB: opcode=0xe5 (vendor) [ 218.990749][ C0] sd 0:0:1:0: tag#16 CDB: opcode=0xe5 (vendor) [ 218.996883][ C1] sd 0:0:1:0: tag#15 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 219.003028][ C0] sd 0:0:1:0: tag#16 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 219.011840][ C1] sd 0:0:1:0: tag#15 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 219.011862][ C1] sd 0:0:1:0: tag#15 CDB[20]: 80 19 [ 219.020692][ C0] sd 0:0:1:0: tag#16 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 219.043559][ C0] sd 0:0:1:0: tag#16 CDB[20]: 80 19 17:42:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x63127, 0x0) close(r0) [ 219.132334][T19746] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 219.142043][T19746] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 219.155161][T19746] EXT4-fs (loop3): get root inode failed [ 219.160827][T19746] EXT4-fs (loop3): mount failed 17:42:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 54) 17:42:50 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:50 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) [ 219.289076][T19790] loop3: detected capacity change from 0 to 1054 [ 219.298091][ C1] sd 0:0:1:0: tag#65 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 219.308009][ C1] sd 0:0:1:0: tag#65 CDB: opcode=0xe5 (vendor) [ 219.314174][ C1] sd 0:0:1:0: tag#65 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 219.323057][ C1] sd 0:0:1:0: tag#65 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 219.331910][ C1] sd 0:0:1:0: tag#65 CDB[20]: 80 19 [ 219.362684][ C0] sd 0:0:1:0: tag#81 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 219.369755][T19790] FAULT_INJECTION: forcing a failure. [ 219.369755][T19790] name failslab, interval 1, probability 0, space 0, times 0 [ 219.372361][ C0] sd 0:0:1:0: tag#81 CDB: opcode=0xe5 (vendor) [ 219.372377][ C0] sd 0:0:1:0: tag#81 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 219.372393][ C0] sd 0:0:1:0: tag#81 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 219.384989][T19790] CPU: 1 PID: 19790 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 219.391170][ C0] sd 0:0:1:0: tag#81 CDB[20]: 80 19 [ 219.399968][T19790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.399989][T19790] Call Trace: [ 219.399996][T19790] dump_stack_lvl+0xd6/0x122 [ 219.440604][T19790] dump_stack+0x11/0x1b [ 219.444759][T19790] should_fail+0x23c/0x250 [ 219.449171][T19790] ? __se_sys_mount+0x4e/0x2f0 [ 219.453938][T19790] __should_failslab+0x81/0x90 [ 219.458706][T19790] should_failslab+0x5/0x20 [ 219.463211][T19790] __kmalloc_track_caller+0x6d/0x350 [ 219.468494][T19790] ? do_mkdirat+0x293/0x2c0 [ 219.473001][T19790] ? strnlen_user+0x137/0x1c0 [ 219.477880][T19790] strndup_user+0x73/0x120 [ 219.482318][T19790] __se_sys_mount+0x4e/0x2f0 [ 219.482368][T19790] __x64_sys_mount+0x63/0x70 [ 219.482468][T19790] do_syscall_64+0x44/0xa0 [ 219.482493][T19790] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 219.482520][T19790] RIP: 0033:0x7f46fee55dfa [ 219.482534][T19790] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 219.482606][T19790] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 219.482624][T19790] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee55dfa [ 219.482636][T19790] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007f46fcbcc000 [ 219.482649][T19790] RBP: 00007f46fcbcc040 R08: 00007f46fcbcc040 R09: 0000000020000000 17:42:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x63246, 0x0) close(r0) 17:42:50 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x21, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 219.482662][T19790] R10: 0000000000000081 R11: 0000000000000206 R12: 0000000020000000 [ 219.482674][T19790] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 17:42:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 55) 17:42:50 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:50 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 17:42:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x26, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x6325d, 0x0) close(r0) [ 219.744150][T19828] loop3: detected capacity change from 0 to 1054 [ 219.759049][ C0] sd 0:0:1:0: tag#71 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 219.768899][ C0] sd 0:0:1:0: tag#71 CDB: opcode=0xe5 (vendor) [ 219.772176][ C1] sd 0:0:1:0: tag#72 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 219.775058][ C0] sd 0:0:1:0: tag#71 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 219.784698][ C1] sd 0:0:1:0: tag#72 CDB: opcode=0xe5 (vendor) [ 219.784714][ C1] sd 0:0:1:0: tag#72 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 219.793531][ C0] sd 0:0:1:0: tag#71 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 219.799658][ C1] sd 0:0:1:0: tag#72 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 219.808488][ C0] sd 0:0:1:0: tag#71 CDB[20]: 80 19 [ 219.817308][ C1] sd 0:0:1:0: tag#72 CDB[20]: 80 19 [ 219.862666][T19828] FAULT_INJECTION: forcing a failure. [ 219.862666][T19828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.875717][T19828] CPU: 1 PID: 19828 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 219.884554][T19828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.894603][T19828] Call Trace: [ 219.897877][T19828] dump_stack_lvl+0xd6/0x122 [ 219.902470][T19828] dump_stack+0x11/0x1b [ 219.906621][T19828] should_fail+0x23c/0x250 [ 219.911088][T19828] should_fail_usercopy+0x16/0x20 [ 219.916118][T19828] _copy_from_user+0x1c/0xd0 [ 219.920729][T19828] strndup_user+0xb0/0x120 [ 219.925212][T19828] __se_sys_mount+0x4e/0x2f0 [ 219.929802][T19828] __x64_sys_mount+0x63/0x70 [ 219.934378][T19828] do_syscall_64+0x44/0xa0 [ 219.938835][T19828] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 219.944714][T19828] RIP: 0033:0x7f46fee55dfa [ 219.949106][T19828] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 219.968696][T19828] RSP: 002b:00007f46fcbcbfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 219.977154][T19828] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f46fee55dfa [ 219.985105][T19828] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007f46fcbcc000 [ 219.993058][T19828] RBP: 00007f46fcbcc040 R08: 00007f46fcbcc040 R09: 0000000020000000 [ 220.001011][T19828] R10: 0000000000000081 R11: 0000000000000206 R12: 0000000020000000 17:42:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x66800, 0x0) close(r0) [ 220.008964][T19828] R13: 0000000020000040 R14: 00007f46fcbcc000 R15: 0000000020000180 17:42:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) (fail_nth: 56) 17:42:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:42:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x6e000, 0x0) close(r0) 17:42:51 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x27, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:51 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x22, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 220.325709][T19855] loop3: detected capacity change from 0 to 1054 [ 220.368677][T19855] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 220.406200][T19855] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 220.419819][T19855] EXT4-fs (loop3): get root inode failed [ 220.425508][T19855] EXT4-fs (loop3): mount failed 17:42:51 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80900, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:42:51 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) (fail_nth: 1) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 220.534471][ C1] sd 0:0:1:0: tag#128 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 220.544222][ C1] sd 0:0:1:0: tag#128 CDB: opcode=0xe5 (vendor) [ 220.550479][ C1] sd 0:0:1:0: tag#128 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 220.559429][ C1] sd 0:0:1:0: tag#128 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 220.568373][ C1] sd 0:0:1:0: tag#128 CDB[20]: 80 19 [ 220.602110][T19880] loop3: detected capacity change from 0 to 1028 [ 220.630078][T19880] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 220.661129][T19880] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 220.675032][T19880] EXT4-fs (loop3): get root inode failed [ 220.680675][T19880] EXT4-fs (loop3): mount failed 17:42:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x75800, 0x0) close(r0) [ 220.751652][T19892] FAULT_INJECTION: forcing a failure. [ 220.751652][T19892] name failslab, interval 1, probability 0, space 0, times 0 [ 220.764322][T19892] CPU: 0 PID: 19892 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 220.773076][T19892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.783133][T19892] Call Trace: [ 220.786422][T19892] dump_stack_lvl+0xd6/0x122 [ 220.791014][T19892] dump_stack+0x11/0x1b [ 220.795182][T19892] should_fail+0x23c/0x250 [ 220.799592][T19892] ? ext4_init_io_end+0x2d/0xa0 [ 220.804440][T19892] __should_failslab+0x81/0x90 [ 220.809239][T19892] should_failslab+0x5/0x20 [ 220.809292][T19892] kmem_cache_alloc+0x4f/0x300 [ 220.809312][T19892] ext4_init_io_end+0x2d/0xa0 [ 220.809333][T19892] ext4_writepages+0x6e5/0x1d70 [ 220.809358][T19892] ? rmqueue_pcplist+0x14e/0x1e0 [ 220.809446][T19892] ? rmqueue+0x4a/0xcd0 [ 220.809469][T19892] ? get_page_from_freelist+0x55e/0x830 [ 220.809525][T19892] ? ext4_readpage+0x140/0x140 17:42:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x7fc00, 0x0) close(r0) [ 220.809548][T19892] do_writepages+0x26b/0x3c0 [ 220.809569][T19892] ? _kstrtoull+0x301/0x320 [ 220.809641][T19892] filemap_write_and_wait_range+0x238/0x3c0 [ 220.809666][T19892] ext4_punch_hole+0x14c/0x9d0 [ 220.809689][T19892] ? proc_fail_nth_write+0x127/0x150 [ 220.809714][T19892] ? avc_policy_seqno+0x22/0x30 [ 220.809734][T19892] ? ext4_fc_start_update+0x58/0x1c0 [ 220.809780][T19892] ext4_fallocate+0xea/0x4d0 [ 220.809797][T19892] ? ext4_ext_truncate+0x170/0x170 [ 220.809814][T19892] vfs_fallocate+0x459/0x6a0 [ 220.809833][T19892] __x64_sys_fallocate+0x75/0xc0 [ 220.809852][T19892] do_syscall_64+0x44/0xa0 [ 220.809875][T19892] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 220.912492][T19892] RIP: 0033:0x7fc9d32258d9 [ 220.916905][T19892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 220.936685][T19892] RSP: 002b:00007fc9d0f7c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d 17:42:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x7fe00, 0x0) close(r0) [ 220.945096][T19892] RAX: ffffffffffffffda RBX: 00007fc9d332a020 RCX: 00007fc9d32258d9 [ 220.953119][T19892] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 220.961092][T19892] RBP: 00007fc9d0f7c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 220.969068][T19892] R10: 00000000100000fe R11: 0000000000000246 R12: 0000000000000001 [ 220.977041][T19892] R13: 00007fff5c347aff R14: 00007fc9d0f7c300 R15: 0000000000022000 17:42:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x28, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 221.007509][T19880] loop3: detected capacity change from 0 to 1028 [ 221.014736][T19880] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 221.038104][T19880] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:42:52 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x23, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 1) [ 221.074343][T19880] EXT4-fs (loop3): get root inode failed [ 221.080019][T19880] EXT4-fs (loop3): mount failed [ 221.136204][T19920] FAULT_INJECTION: forcing a failure. [ 221.136204][T19920] name failslab, interval 1, probability 0, space 0, times 0 [ 221.148839][T19920] CPU: 1 PID: 19920 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 221.157608][T19920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.167662][T19920] Call Trace: [ 221.170952][T19920] dump_stack_lvl+0xd6/0x122 [ 221.175608][T19920] dump_stack+0x11/0x1b [ 221.179763][T19920] should_fail+0x23c/0x250 [ 221.184176][T19920] ? __se_sys_memfd_create+0xfb/0x390 [ 221.189606][T19920] __should_failslab+0x81/0x90 [ 221.194393][T19920] should_failslab+0x5/0x20 [ 221.198894][T19920] __kmalloc+0x6f/0x350 [ 221.203040][T19920] ? strnlen_user+0x137/0x1c0 [ 221.207726][T19920] __se_sys_memfd_create+0xfb/0x390 [ 221.212920][T19920] __x64_sys_memfd_create+0x2d/0x40 [ 221.218116][T19920] do_syscall_64+0x44/0xa0 [ 221.222573][T19920] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 221.228480][T19920] RIP: 0033:0x7fa5b3d028d9 [ 221.232884][T19920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 221.252490][T19920] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 221.260907][T19920] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fa5b3d028d9 [ 221.268901][T19920] RDX: 0000000000002a00 RSI: 0000000000000000 RDI: 00007fa5b3d5be76 [ 221.276874][T19920] RBP: 0000000000000005 R08: 0000000000001500 R09: ffffffffffffffff 17:42:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x80600, 0x0) close(r0) 17:42:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c02, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:42:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 2) [ 221.284836][T19920] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000008100000 [ 221.292872][T19920] R13: 0000000020000040 R14: 0000000000083c00 R15: 0000000020000180 [ 221.404065][T19930] FAULT_INJECTION: forcing a failure. [ 221.404065][T19930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.417242][T19930] CPU: 0 PID: 19930 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 221.426064][T19930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.436118][T19930] Call Trace: [ 221.439402][T19930] dump_stack_lvl+0xd6/0x122 [ 221.443999][T19930] dump_stack+0x11/0x1b [ 221.448198][T19930] should_fail+0x23c/0x250 17:42:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x100000, 0x0) close(r0) [ 221.452610][T19930] should_fail_usercopy+0x16/0x20 [ 221.457669][T19930] _copy_from_user+0x1c/0xd0 [ 221.462340][T19930] __se_sys_memfd_create+0x137/0x390 [ 221.467629][T19930] __x64_sys_memfd_create+0x2d/0x40 [ 221.472987][T19930] do_syscall_64+0x44/0xa0 [ 221.477404][T19930] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 221.483403][T19930] RIP: 0033:0x7fa5b3d028d9 [ 221.487809][T19930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 221.507413][T19930] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 221.515823][T19930] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fa5b3d028d9 [ 221.523786][T19930] RDX: 0000000000002a00 RSI: 0000000000000000 RDI: 00007fa5b3d5be76 [ 221.531751][T19930] RBP: 0000000000000005 R08: 0000000000001500 R09: ffffffffffffffff [ 221.539718][T19930] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000008100000 [ 221.547772][T19930] R13: 0000000020000040 R14: 0000000000083c00 R15: 0000000020000180 [ 221.548766][T19939] loop3: detected capacity change from 0 to 1054 17:42:52 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x100600, 0x0) close(r0) [ 221.639139][T19939] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:42:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 3) [ 221.700618][T19939] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:42:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x180600, 0x0) close(r0) [ 221.774443][T19939] EXT4-fs (loop3): get root inode failed [ 221.780138][T19939] EXT4-fs (loop3): mount failed [ 221.799616][T19959] FAULT_INJECTION: forcing a failure. [ 221.799616][T19959] name failslab, interval 1, probability 0, space 0, times 0 [ 221.812350][T19959] CPU: 0 PID: 19959 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 221.821106][T19959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.831148][T19959] Call Trace: [ 221.834421][T19959] dump_stack_lvl+0xd6/0x122 [ 221.839002][T19959] dump_stack+0x11/0x1b [ 221.843152][T19959] should_fail+0x23c/0x250 [ 221.847547][T19959] ? shmem_alloc_inode+0x22/0x30 [ 221.852471][T19959] __should_failslab+0x81/0x90 [ 221.857218][T19959] ? shmem_match+0xa0/0xa0 [ 221.861615][T19959] should_failslab+0x5/0x20 [ 221.866100][T19959] kmem_cache_alloc+0x4f/0x300 [ 221.870925][T19959] ? shmem_match+0xa0/0xa0 [ 221.875403][T19959] shmem_alloc_inode+0x22/0x30 [ 221.880232][T19959] new_inode_pseudo+0x38/0x1c0 [ 221.885071][T19959] new_inode+0x21/0x120 [ 221.889304][T19959] shmem_get_inode+0xb7/0x4a0 [ 221.893968][T19959] __shmem_file_setup+0xf1/0x1d0 [ 221.898922][T19959] shmem_file_setup+0x37/0x40 [ 221.903581][T19959] __se_sys_memfd_create+0x1eb/0x390 [ 221.908848][T19959] __x64_sys_memfd_create+0x2d/0x40 [ 221.914044][T19959] do_syscall_64+0x44/0xa0 [ 221.918491][T19959] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 221.924392][T19959] RIP: 0033:0x7fa5b3d028d9 [ 221.928795][T19959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 221.948382][T19959] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 221.956868][T19959] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fa5b3d028d9 [ 221.964820][T19959] RDX: 0000000000002a00 RSI: 0000000000000000 RDI: 00007fa5b3d5be76 17:42:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x29, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 221.972790][T19959] RBP: 0000000000000005 R08: 0000000000001500 R09: ffffffffffffffff [ 221.980827][T19959] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000008100000 [ 221.989060][T19959] R13: 0000000020000040 R14: 0000000000083c00 R15: 0000000020000180 17:42:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 4) [ 222.054918][T19939] loop3: detected capacity change from 0 to 1054 [ 222.070251][T19977] FAULT_INJECTION: forcing a failure. [ 222.070251][T19977] name failslab, interval 1, probability 0, space 0, times 0 [ 222.082917][T19977] CPU: 1 PID: 19977 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 222.084315][T19939] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 222.091674][T19977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.091692][T19977] Call Trace: [ 222.091700][T19977] dump_stack_lvl+0xd6/0x122 [ 222.091722][T19977] dump_stack+0x11/0x1b [ 222.119105][T19939] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 222.123066][T19977] should_fail+0x23c/0x250 [ 222.123089][T19977] ? security_inode_alloc+0x30/0x180 [ 222.135249][T19939] EXT4-fs (loop3): get root inode failed [ 222.139416][T19977] __should_failslab+0x81/0x90 [ 222.139439][T19977] should_failslab+0x5/0x20 [ 222.144696][T19939] EXT4-fs (loop3): mount failed [ 222.150299][T19977] kmem_cache_alloc+0x4f/0x300 [ 222.169121][T19977] security_inode_alloc+0x30/0x180 [ 222.174228][T19977] inode_init_always+0x20b/0x430 [ 222.179157][T19977] ? shmem_match+0xa0/0xa0 [ 222.183568][T19977] new_inode_pseudo+0x73/0x1c0 [ 222.188326][T19977] new_inode+0x21/0x120 [ 222.192477][T19977] shmem_get_inode+0xb7/0x4a0 [ 222.197146][T19977] __shmem_file_setup+0xf1/0x1d0 [ 222.202088][T19977] shmem_file_setup+0x37/0x40 [ 222.206821][T19977] __se_sys_memfd_create+0x1eb/0x390 [ 222.212144][T19977] __x64_sys_memfd_create+0x2d/0x40 [ 222.217335][T19977] do_syscall_64+0x44/0xa0 [ 222.221771][T19977] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 222.227675][T19977] RIP: 0033:0x7fa5b3d028d9 [ 222.232080][T19977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 222.251676][T19977] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 222.260084][T19977] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fa5b3d028d9 [ 222.268110][T19977] RDX: 0000000000002a00 RSI: 0000000000000000 RDI: 00007fa5b3d5be76 [ 222.276117][T19977] RBP: 0000000000000005 R08: 0000000000001500 R09: ffffffffffffffff [ 222.284074][T19977] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000008100000 [ 222.292041][T19977] R13: 0000000020000040 R14: 0000000000083c00 R15: 0000000020000180 17:42:53 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x24, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x200600, 0x0) close(r0) 17:42:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 5) 17:42:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c03, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:42:53 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x2, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 222.396207][T19998] loop3: detected capacity change from 0 to 1054 [ 222.398070][T19994] FAULT_INJECTION: forcing a failure. [ 222.398070][T19994] name failslab, interval 1, probability 0, space 0, times 0 [ 222.415187][T19994] CPU: 0 PID: 19994 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 222.423948][T19994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.434011][T19994] Call Trace: [ 222.437392][T19994] dump_stack_lvl+0xd6/0x122 [ 222.441977][T19994] dump_stack+0x11/0x1b [ 222.446122][T19994] should_fail+0x23c/0x250 [ 222.450524][T19994] ? __d_alloc+0x36/0x370 [ 222.454844][T19994] __should_failslab+0x81/0x90 [ 222.459594][T19994] should_failslab+0x5/0x20 [ 222.464140][T19994] kmem_cache_alloc+0x4f/0x300 [ 222.468900][T19994] ? security_inode_alloc+0x138/0x180 [ 222.474355][T19994] ? __init_rwsem+0x59/0x70 [ 222.478869][T19994] __d_alloc+0x36/0x370 [ 222.483022][T19994] d_alloc_pseudo+0x1a/0x50 [ 222.487597][T19994] alloc_file_pseudo+0x77/0x150 [ 222.492438][T19994] __shmem_file_setup+0x14c/0x1d0 [ 222.497526][T19994] shmem_file_setup+0x37/0x40 [ 222.502187][T19994] __se_sys_memfd_create+0x1eb/0x390 [ 222.507454][T19994] __x64_sys_memfd_create+0x2d/0x40 [ 222.512635][T19994] do_syscall_64+0x44/0xa0 [ 222.517157][T19994] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 222.523076][T19994] RIP: 0033:0x7fa5b3d028d9 [ 222.527563][T19994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 222.547153][T19994] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 222.555547][T19994] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fa5b3d028d9 [ 222.563509][T19994] RDX: 0000000000002a00 RSI: 0000000000000000 RDI: 00007fa5b3d5be76 [ 222.571462][T19994] RBP: 0000000000000005 R08: 0000000000001500 R09: ffffffffffffffff [ 222.579412][T19994] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000008100000 [ 222.587370][T19994] R13: 0000000020000040 R14: 0000000000083c00 R15: 0000000020000180 [ 222.629164][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 222.629196][ C1] sd 0:0:1:0: tag#202 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 222.645554][ C1] sd 0:0:1:0: tag#202 CDB: opcode=0xe5 (vendor) [ 222.651826][ C1] sd 0:0:1:0: tag#202 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 222.660764][ C1] sd 0:0:1:0: tag#202 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 222.669710][ C1] sd 0:0:1:0: tag#202 CDB[20]: 80 19 [ 222.684082][T19998] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 222.718310][T19998] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:42:53 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 222.733298][T19998] EXT4-fs (loop3): get root inode failed [ 222.738974][T19998] EXT4-fs (loop3): mount failed [ 222.768792][ C1] sd 0:0:1:0: tag#241 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 222.778564][ C1] sd 0:0:1:0: tag#241 CDB: opcode=0xe5 (vendor) 17:42:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 6) [ 222.784820][ C1] sd 0:0:1:0: tag#241 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 222.793815][ C1] sd 0:0:1:0: tag#241 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 222.802775][ C1] sd 0:0:1:0: tag#241 CDB[20]: 80 19 [ 222.853250][T20019] FAULT_INJECTION: forcing a failure. [ 222.853250][T20019] name failslab, interval 1, probability 0, space 0, times 0 [ 222.865868][T20019] CPU: 1 PID: 20019 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 222.874660][T20019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.884715][T20019] Call Trace: [ 222.888077][T20019] dump_stack_lvl+0xd6/0x122 [ 222.892673][T20019] dump_stack+0x11/0x1b [ 222.896834][T20019] should_fail+0x23c/0x250 [ 222.901241][T20019] ? __alloc_file+0x2e/0x1a0 [ 222.905832][T20019] __should_failslab+0x81/0x90 [ 222.910592][T20019] should_failslab+0x5/0x20 [ 222.915101][T20019] kmem_cache_alloc+0x4f/0x300 [ 222.919924][T20019] __alloc_file+0x2e/0x1a0 [ 222.924344][T20019] alloc_empty_file+0xcd/0x1c0 [ 222.929140][T20019] alloc_file+0x3a/0x280 [ 222.933470][T20019] alloc_file_pseudo+0xfa/0x150 [ 222.938349][T20019] __shmem_file_setup+0x14c/0x1d0 [ 222.943385][T20019] shmem_file_setup+0x37/0x40 [ 222.948065][T20019] __se_sys_memfd_create+0x1eb/0x390 17:42:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x220600, 0x0) close(r0) 17:42:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x240200, 0x0) close(r0) [ 222.953411][T20019] __x64_sys_memfd_create+0x2d/0x40 [ 222.958608][T20019] do_syscall_64+0x44/0xa0 [ 222.963105][T20019] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 222.969009][T20019] RIP: 0033:0x7fa5b3d028d9 [ 222.973420][T20019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 222.993059][T20019] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 223.001474][T20019] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fa5b3d028d9 [ 223.009471][T20019] RDX: 0000000000002a00 RSI: 0000000000000000 RDI: 00007fa5b3d5be76 [ 223.017444][T20019] RBP: 0000000000000005 R08: 0000000000001500 R09: ffffffffffffffff [ 223.025416][T20019] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000008100000 [ 223.033508][T20019] R13: 0000000020000040 R14: 0000000000083c00 R15: 0000000020000180 17:42:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 7) [ 223.073249][T19998] loop3: detected capacity change from 0 to 1054 [ 223.087581][T19998] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 223.099312][T20039] FAULT_INJECTION: forcing a failure. [ 223.099312][T20039] name failslab, interval 1, probability 0, space 0, times 0 [ 223.112030][T20039] CPU: 0 PID: 20039 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 17:42:54 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x280600, 0x0) close(r0) [ 223.120796][T20039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.130836][T20039] Call Trace: [ 223.134227][T20039] dump_stack_lvl+0xd6/0x122 [ 223.138812][T20039] dump_stack+0x11/0x1b [ 223.142966][T20039] should_fail+0x23c/0x250 [ 223.147377][T20039] ? security_file_alloc+0x30/0x190 [ 223.152634][T20039] __should_failslab+0x81/0x90 [ 223.157480][T20039] should_failslab+0x5/0x20 [ 223.162009][T20039] kmem_cache_alloc+0x4f/0x300 [ 223.166777][T20039] security_file_alloc+0x30/0x190 [ 223.171853][T20039] __alloc_file+0x83/0x1a0 [ 223.176266][T20039] alloc_empty_file+0xcd/0x1c0 [ 223.181030][T20039] alloc_file+0x3a/0x280 [ 223.185283][T20039] alloc_file_pseudo+0xfa/0x150 [ 223.190029][T19998] EXT4-fs: failed to create workqueue [ 223.190186][T20039] __shmem_file_setup+0x14c/0x1d0 [ 223.195560][T19998] EXT4-fs (loop3): mount failed [ 223.200567][T20039] shmem_file_setup+0x37/0x40 [ 223.210086][T20039] __se_sys_memfd_create+0x1eb/0x390 [ 223.215423][T20039] __x64_sys_memfd_create+0x2d/0x40 [ 223.220613][T20039] do_syscall_64+0x44/0xa0 [ 223.225247][T20039] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 223.231196][T20039] RIP: 0033:0x7fa5b3d028d9 [ 223.235684][T20039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 223.255279][T20039] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 223.263712][T20039] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fa5b3d028d9 17:42:54 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x4, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:54 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 223.271664][T20039] RDX: 0000000000002a00 RSI: 0000000000000000 RDI: 00007fa5b3d5be76 [ 223.279701][T20039] RBP: 0000000000000005 R08: 0000000000001500 R09: ffffffffffffffff [ 223.287662][T20039] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000008100000 [ 223.296048][T20039] R13: 0000000020000040 R14: 0000000000083c00 R15: 0000000020000180 17:42:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 8) [ 223.391431][ C0] sd 0:0:1:0: tag#223 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 223.401198][ C0] sd 0:0:1:0: tag#223 CDB: opcode=0xe5 (vendor) [ 223.407466][ C0] sd 0:0:1:0: tag#223 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 223.416420][ C0] sd 0:0:1:0: tag#223 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 223.418961][T20064] FAULT_INJECTION: forcing a failure. [ 223.418961][T20064] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 223.425378][ C0] sd 0:0:1:0: tag#223 CDB[20]: 80 19 [ 223.438637][T20064] CPU: 1 PID: 20064 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 223.452634][T20064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.462940][T20064] Call Trace: [ 223.466216][T20064] dump_stack_lvl+0xd6/0x122 [ 223.470810][T20064] dump_stack+0x11/0x1b [ 223.474963][T20064] should_fail+0x23c/0x250 [ 223.479600][T20064] __alloc_pages+0x102/0x320 [ 223.484192][T20064] alloc_pages_vma+0x5ee/0x770 17:42:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c04, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 223.488988][T20064] shmem_getpage_gfp+0x96d/0x13d0 [ 223.494062][T20064] ? policydb_context_isvalid+0x135/0x230 [ 223.499807][T20064] shmem_write_begin+0x7e/0x100 [ 223.504780][T20064] generic_perform_write+0x1b8/0x3e0 [ 223.504811][T20064] __generic_file_write_iter+0x174/0x310 [ 223.504839][T20064] ? generic_write_checks+0x250/0x290 [ 223.504864][T20064] generic_file_write_iter+0x75/0x130 [ 223.504928][T20064] vfs_write+0x7bc/0x900 [ 223.504950][T20064] __x64_sys_pwrite64+0xf5/0x150 [ 223.504973][T20064] do_syscall_64+0x44/0xa0 [ 223.505064][T20064] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 223.505088][T20064] RIP: 0033:0x7fa5b3cb58a7 [ 223.505104][T20064] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 223.505122][T20064] RSP: 002b:00007fa5b1a79f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 223.505140][T20064] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3cb58a7 [ 223.505151][T20064] RDX: 0000000000000066 RSI: 0000000020010000 RDI: 0000000000000004 [ 223.505162][T20064] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 17:42:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x300600, 0x0) close(r0) 17:42:54 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x26, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 223.505172][T20064] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 223.505182][T20064] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 223.599445][T20073] loop3: detected capacity change from 0 to 1054 [ 223.709182][T20064] loop5: detected capacity change from 0 to 1054 [ 223.741776][T20064] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 17:42:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 9) [ 223.814057][ C0] sd 0:0:1:0: tag#193 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 223.823833][ C0] sd 0:0:1:0: tag#193 CDB: opcode=0xe5 (vendor) [ 223.830111][ C0] sd 0:0:1:0: tag#193 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 223.839179][ C0] sd 0:0:1:0: tag#193 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 223.848137][ C0] sd 0:0:1:0: tag#193 CDB[20]: 80 19 [ 223.863258][T20073] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 223.898396][T20073] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:42:54 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:54 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x9, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 223.898593][T20093] FAULT_INJECTION: forcing a failure. [ 223.898593][T20093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.923463][T20093] CPU: 1 PID: 20093 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 223.929293][T20073] EXT4-fs (loop3): get root inode failed [ 223.932309][T20093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.932322][T20093] Call Trace: [ 223.932329][T20093] dump_stack_lvl+0xd6/0x122 [ 223.937977][T20073] EXT4-fs (loop3): mount failed [ 223.948015][T20093] dump_stack+0x11/0x1b 17:42:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x500500, 0x0) close(r0) [ 223.948039][T20093] should_fail+0x23c/0x250 [ 223.948056][T20093] should_fail_usercopy+0x16/0x20 [ 223.974222][T20093] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 223.980004][T20093] ? shmem_write_begin+0x7e/0x100 [ 223.985030][T20093] generic_perform_write+0x201/0x3e0 [ 223.990345][T20093] __generic_file_write_iter+0x174/0x310 [ 223.995994][T20093] ? generic_write_checks+0x250/0x290 [ 224.001447][T20093] generic_file_write_iter+0x75/0x130 [ 224.006817][T20093] vfs_write+0x7bc/0x900 [ 224.011060][T20093] __x64_sys_pwrite64+0xf5/0x150 [ 224.016013][T20093] do_syscall_64+0x44/0xa0 [ 224.020432][T20093] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 224.026470][T20093] RIP: 0033:0x7fa5b3cb58a7 [ 224.030941][T20093] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 224.050612][T20093] RSP: 002b:00007fa5b1a79f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 224.059018][T20093] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3cb58a7 [ 224.066989][T20093] RDX: 0000000000000066 RSI: 0000000020010000 RDI: 0000000000000004 [ 224.075026][T20093] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 224.083065][T20093] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 224.091051][T20093] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 224.105222][T20093] loop5: detected capacity change from 0 to 1054 17:42:55 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x27, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 224.106592][ C0] sd 0:0:1:0: tag#201 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 224.112775][T20093] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 224.121276][ C0] sd 0:0:1:0: tag#201 CDB: opcode=0xe5 (vendor) [ 224.121295][ C0] sd 0:0:1:0: tag#201 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 224.121311][ C0] sd 0:0:1:0: tag#201 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 224.121344][ C0] sd 0:0:1:0: tag#201 CDB[20]: 80 19 [ 224.183327][T20093] EXT4-fs (loop5): orphan cleanup on readonly fs [ 224.189381][ C0] sd 0:0:1:0: tag#203 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 224.189706][T20093] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 224.199426][ C0] sd 0:0:1:0: tag#203 CDB: opcode=0xe5 (vendor) [ 224.213094][T20093] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 224.219342][ C0] sd 0:0:1:0: tag#203 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 224.230194][T20093] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 224.239086][ C0] sd 0:0:1:0: tag#203 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 224.253150][T20093] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 224.262084][ C0] sd 0:0:1:0: tag#203 CDB[20]: 80 19 17:42:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x580000, 0x0) close(r0) [ 224.268724][T20093] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:42:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 10) [ 224.304213][T20073] loop3: detected capacity change from 0 to 1054 [ 224.313328][T20073] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:42:55 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2d, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:55 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xa, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 224.347666][T20073] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 224.427496][T20142] FAULT_INJECTION: forcing a failure. [ 224.427496][T20142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.440564][T20142] CPU: 0 PID: 20142 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 224.449364][T20142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.459479][T20142] Call Trace: [ 224.462754][T20142] dump_stack_lvl+0xd6/0x122 [ 224.467350][T20142] dump_stack+0x11/0x1b [ 224.471556][T20142] should_fail+0x23c/0x250 [ 224.472057][T20073] EXT4-fs (loop3): get root inode failed [ 224.476080][T20142] should_fail_usercopy+0x16/0x20 [ 224.481710][T20073] EXT4-fs (loop3): mount failed [ 224.486713][T20142] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 224.486789][T20142] ? shmem_write_begin+0x7e/0x100 [ 224.502255][T20142] generic_perform_write+0x201/0x3e0 [ 224.507582][T20142] __generic_file_write_iter+0x174/0x310 [ 224.513255][T20142] ? generic_write_checks+0x250/0x290 [ 224.518636][T20142] generic_file_write_iter+0x75/0x130 [ 224.524013][T20142] vfs_write+0x7bc/0x900 [ 224.528239][T20142] __x64_sys_pwrite64+0xf5/0x150 [ 224.533189][T20142] do_syscall_64+0x44/0xa0 [ 224.537610][T20142] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 224.543548][T20142] RIP: 0033:0x7fa5b3cb58a7 [ 224.547942][T20142] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 224.567530][T20142] RSP: 002b:00007fa5b1a79f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 224.575931][T20142] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3cb58a7 [ 224.583941][T20142] RDX: 000000000000001f RSI: 0000000020010100 RDI: 0000000000000004 [ 224.591898][T20142] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 224.599851][T20142] R10: 00000000000004e0 R11: 0000000000000293 R12: 0000000000000004 [ 224.607805][T20142] R13: 0000000000000004 R14: 0000000020000558 R15: 0000000000000001 17:42:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c05, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:42:55 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x28, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 224.623048][T20142] loop5: detected capacity change from 0 to 1054 [ 224.633887][T20142] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 224.660495][T20142] EXT4-fs (loop5): orphan cleanup on readonly fs 17:42:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x580700, 0x0) close(r0) 17:42:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 11) [ 224.666910][T20142] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 224.680669][T20142] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 224.680691][T20142] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:42:55 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 12) [ 224.680714][T20142] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 224.680727][T20142] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:42:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c06, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 224.792262][T20176] loop3: detected capacity change from 0 to 1054 [ 224.795839][T20177] FAULT_INJECTION: forcing a failure. [ 224.795839][T20177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.795862][T20177] CPU: 1 PID: 20177 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 224.795881][T20177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.795890][T20177] Call Trace: [ 224.795897][T20177] dump_stack_lvl+0xd6/0x122 [ 224.795975][T20177] dump_stack+0x11/0x1b [ 224.795992][T20177] should_fail+0x23c/0x250 [ 224.796011][T20177] should_fail_usercopy+0x16/0x20 [ 224.796091][T20177] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 224.796113][T20177] ? shmem_write_begin+0x7e/0x100 [ 224.796133][T20177] generic_perform_write+0x201/0x3e0 [ 224.796236][T20177] __generic_file_write_iter+0x174/0x310 [ 224.796261][T20177] ? generic_write_checks+0x250/0x290 [ 224.796286][T20177] generic_file_write_iter+0x75/0x130 [ 224.796311][T20177] vfs_write+0x7bc/0x900 [ 224.796348][T20177] __x64_sys_pwrite64+0xf5/0x150 [ 224.796373][T20177] do_syscall_64+0x44/0xa0 [ 224.796396][T20177] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 224.796475][T20177] RIP: 0033:0x7fa5b3cb58a7 [ 224.796507][T20177] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 224.796525][T20177] RSP: 002b:00007fa5b1a79f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 224.796545][T20177] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3cb58a7 [ 224.796557][T20177] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000004 [ 224.796568][T20177] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 224.796583][T20177] R10: 0000000000000640 R11: 0000000000000293 R12: 0000000000000004 [ 224.796596][T20177] R13: 0000000000000004 R14: 0000000020000570 R15: 0000000000000002 [ 224.798085][T20177] loop5: detected capacity change from 0 to 1054 [ 224.808924][T20177] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 224.812908][T20177] EXT4-fs (loop5): orphan cleanup on readonly fs [ 224.812920][T20177] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 224.813025][T20177] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 224.813041][T20177] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 224.813060][T20177] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 224.813073][T20177] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 224.837056][T20176] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 224.839812][T20176] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 224.839913][T20176] EXT4-fs (loop3): get root inode failed [ 224.839924][T20176] EXT4-fs (loop3): mount failed [ 224.888619][T20176] loop3: detected capacity change from 0 to 1054 17:42:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x600000, 0x0) close(r0) [ 224.888951][T20176] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 224.895543][T20176] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 224.895728][T20176] EXT4-fs (loop3): get root inode failed [ 224.895739][T20176] EXT4-fs (loop3): mount failed [ 224.919499][T20198] FAULT_INJECTION: forcing a failure. [ 224.919499][T20198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.041390][ C0] sd 0:0:1:0: tag#290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 225.051124][T20198] CPU: 1 PID: 20198 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 225.059535][ C0] sd 0:0:1:0: tag#290 CDB: opcode=0xe5 (vendor) [ 225.067460][T20198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.067471][T20198] Call Trace: [ 225.067478][T20198] dump_stack_lvl+0xd6/0x122 [ 225.075473][ C0] sd 0:0:1:0: tag#290 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 225.083402][T20198] dump_stack+0x11/0x1b [ 225.083421][T20198] should_fail+0x23c/0x250 [ 225.091393][ C0] sd 0:0:1:0: tag#290 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 225.099331][T20198] should_fail_usercopy+0x16/0x20 [ 225.105663][ C0] sd 0:0:1:0: tag#290 CDB[20]: 80 19 [ 225.114807][T20198] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 225.114830][T20198] generic_perform_write+0x201/0x3e0 [ 225.172709][T20210] loop3: detected capacity change from 0 to 1054 [ 225.177205][T20198] __generic_file_write_iter+0x174/0x310 17:42:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x600400, 0x0) close(r0) [ 225.190019][T20210] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 225.198365][T20198] ? generic_write_checks+0x250/0x290 [ 225.283970][T20210] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 225.284297][T20198] generic_file_write_iter+0x75/0x130 [ 225.303762][T20210] EXT4-fs (loop3): get root inode failed [ 225.311058][T20198] vfs_write+0x7bc/0x900 [ 225.311085][T20198] __x64_sys_pwrite64+0xf5/0x150 [ 225.315307][T20210] EXT4-fs (loop3): mount failed [ 225.319692][T20198] do_syscall_64+0x44/0xa0 [ 225.417943][T20198] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 225.423920][T20198] RIP: 0033:0x7fa5b3cb58a7 [ 225.428332][T20198] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 225.447935][T20198] RSP: 002b:00007fa5b1a79f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 225.456384][T20198] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3cb58a7 17:42:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x680000, 0x0) close(r0) [ 225.464364][T20198] RDX: 0000000000000009 RSI: 0000000020010400 RDI: 0000000000000004 [ 225.472337][T20198] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 225.480329][T20198] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000004 [ 225.488301][T20198] R13: 0000000000000004 R14: 0000000020000588 R15: 0000000000000003 [ 225.513501][T20198] loop5: detected capacity change from 0 to 1054 [ 225.521641][T20198] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 225.534882][T20210] loop3: detected capacity change from 0 to 1054 [ 225.548705][T20198] EXT4-fs (loop5): orphan cleanup on readonly fs 17:42:56 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2f, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:56 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xb, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:56 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x29, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 225.555074][T20198] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 225.568932][T20198] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 225.579946][T20198] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 225.593926][T20198] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 225.600683][T20198] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.636278][T20210] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 225.671392][T20210] EXT4-fs: failed to create workqueue [ 225.676788][T20210] EXT4-fs (loop3): mount failed 17:42:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 13) 17:42:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x680600, 0x0) close(r0) [ 225.691823][ C0] sd 0:0:1:0: tag#292 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 225.701583][ C0] sd 0:0:1:0: tag#292 CDB: opcode=0xe5 (vendor) [ 225.707820][ C0] sd 0:0:1:0: tag#292 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 225.716828][ C0] sd 0:0:1:0: tag#292 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 225.725787][ C0] sd 0:0:1:0: tag#292 CDB[20]: 80 19 17:42:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c07, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:42:56 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x30, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 225.776696][ C0] sd 0:0:1:0: tag#294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 225.786639][ C0] sd 0:0:1:0: tag#294 CDB: opcode=0xe5 (vendor) [ 225.792894][ C0] sd 0:0:1:0: tag#294 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 225.801849][ C0] sd 0:0:1:0: tag#294 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 225.810798][ C0] sd 0:0:1:0: tag#294 CDB[20]: 80 19 17:42:56 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xc, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 225.920052][T20272] FAULT_INJECTION: forcing a failure. [ 225.920052][T20272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 225.921812][T20273] loop3: detected capacity change from 0 to 1054 [ 225.933320][T20272] CPU: 0 PID: 20272 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 225.948408][T20272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.958541][T20272] Call Trace: [ 225.961812][T20272] dump_stack_lvl+0xd6/0x122 [ 225.966447][T20272] dump_stack+0x11/0x1b [ 225.970595][T20272] should_fail+0x23c/0x250 [ 225.975002][T20272] __alloc_pages+0x102/0x320 [ 225.979581][T20272] alloc_pages_vma+0x5ee/0x770 [ 225.984407][T20272] ? shmem_getpage_gfp+0x83f/0x13d0 [ 225.989768][T20272] shmem_getpage_gfp+0x96d/0x13d0 [ 225.994778][T20272] ? policydb_context_isvalid+0x135/0x230 [ 226.000585][T20272] shmem_write_begin+0x7e/0x100 [ 226.005418][T20272] generic_perform_write+0x1b8/0x3e0 [ 226.010709][T20272] __generic_file_write_iter+0x174/0x310 [ 226.016434][T20272] ? generic_write_checks+0x250/0x290 [ 226.021792][T20272] generic_file_write_iter+0x75/0x130 [ 226.027209][T20272] vfs_write+0x7bc/0x900 [ 226.031441][T20272] __x64_sys_pwrite64+0xf5/0x150 [ 226.036366][T20272] do_syscall_64+0x44/0xa0 [ 226.040883][T20272] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 226.046810][T20272] RIP: 0033:0x7fa5b3cb58a7 [ 226.051205][T20272] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 226.070797][T20272] RSP: 002b:00007fa5b1a79f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 226.079277][T20272] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3cb58a7 [ 226.087229][T20272] RDX: 000000000000001d RSI: 0000000020010e00 RDI: 0000000000000004 [ 226.095179][T20272] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 226.103130][T20272] R10: 0000000000001500 R11: 0000000000000293 R12: 0000000000000004 [ 226.111134][T20272] R13: 0000000000000004 R14: 00000000200005a0 R15: 0000000000000004 17:42:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x700000, 0x0) close(r0) [ 226.164920][ C1] sd 0:0:1:0: tag#252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 226.174696][ C1] sd 0:0:1:0: tag#252 CDB: opcode=0xe5 (vendor) [ 226.180969][ C1] sd 0:0:1:0: tag#252 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 226.189932][ C1] sd 0:0:1:0: tag#252 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 226.198883][ C1] sd 0:0:1:0: tag#252 CDB[20]: 80 19 [ 226.251068][T20272] loop5: detected capacity change from 0 to 1054 [ 226.268648][T20272] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 226.278544][T20273] loop3: detected capacity change from 0 to 1054 [ 226.290078][T20273] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:42:57 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x31, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 226.302502][T20273] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 226.329214][T20273] EXT4-fs (loop3): get root inode failed [ 226.334966][T20273] EXT4-fs (loop3): mount failed [ 226.344921][T20272] EXT4-fs error (device loop5): ext4_fill_super:4810: inode #2: comm syz-executor.5: iget: root inode unallocated [ 226.357024][T20272] EXT4-fs (loop5): get root inode failed [ 226.357038][T20272] EXT4-fs (loop5): mount failed 17:42:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x700300, 0x0) close(r0) 17:42:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c08, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:42:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 14) 17:42:57 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:57 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x32, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:57 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xd, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 226.499210][T20321] loop3: detected capacity change from 0 to 1054 [ 226.524040][T20326] FAULT_INJECTION: forcing a failure. [ 226.524040][T20326] name failslab, interval 1, probability 0, space 0, times 0 [ 226.536733][T20326] CPU: 0 PID: 20326 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 226.545538][T20326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.555578][T20326] Call Trace: [ 226.558925][T20326] dump_stack_lvl+0xd6/0x122 [ 226.563516][T20326] dump_stack+0x11/0x1b [ 226.567657][T20326] should_fail+0x23c/0x250 [ 226.572061][T20326] ? xas_create+0x3fb/0xb30 [ 226.576623][T20326] __should_failslab+0x81/0x90 [ 226.581448][T20326] should_failslab+0x5/0x20 [ 226.585935][T20326] kmem_cache_alloc+0x4f/0x300 [ 226.590762][T20326] xas_create+0x3fb/0xb30 [ 226.595092][T20326] ? get_page_from_freelist+0x460/0x830 [ 226.600625][T20326] xas_create_range+0x146/0x360 [ 226.605477][T20326] shmem_add_to_page_cache+0x3bd/0x660 [ 226.610922][T20326] shmem_getpage_gfp+0xba5/0x13d0 [ 226.615931][T20326] ? policydb_context_isvalid+0x135/0x230 [ 226.621659][T20326] shmem_write_begin+0x7e/0x100 [ 226.626494][T20326] generic_perform_write+0x1b8/0x3e0 [ 226.631832][T20326] __generic_file_write_iter+0x174/0x310 [ 226.637449][T20326] ? generic_write_checks+0x250/0x290 [ 226.642813][T20326] generic_file_write_iter+0x75/0x130 [ 226.648172][T20326] vfs_write+0x7bc/0x900 [ 226.652474][T20326] __x64_sys_pwrite64+0xf5/0x150 [ 226.657526][T20326] do_syscall_64+0x44/0xa0 [ 226.661951][T20326] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 226.667883][T20326] RIP: 0033:0x7fa5b3cb58a7 [ 226.672278][T20326] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 226.691914][T20326] RSP: 002b:00007fa5b1a79f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 226.700340][T20326] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3cb58a7 [ 226.708297][T20326] RDX: 000000000000001d RSI: 0000000020010e00 RDI: 0000000000000004 [ 226.716248][T20326] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 226.724262][T20326] R10: 0000000000001500 R11: 0000000000000293 R12: 0000000000000004 [ 226.732214][T20326] R13: 0000000000000004 R14: 00000000200005a0 R15: 0000000000000004 [ 226.787018][T20321] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 226.824644][T20321] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 226.825328][T20326] loop5: detected capacity change from 0 to 1054 [ 226.877157][T20326] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 226.886502][T20321] EXT4-fs (loop3): get root inode failed [ 226.892189][T20321] EXT4-fs (loop3): mount failed [ 226.915715][T20326] EXT4-fs (loop5): orphan cleanup on readonly fs [ 226.922330][T20326] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # 17:42:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x780000, 0x0) close(r0) 17:42:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 15) [ 226.936179][T20326] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 226.947092][T20326] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 226.961080][T20326] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 226.967768][T20326] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 227.022549][T20355] FAULT_INJECTION: forcing a failure. [ 227.022549][T20355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.035706][T20355] CPU: 0 PID: 20355 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 227.044475][T20355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.054527][T20355] Call Trace: [ 227.057797][T20355] dump_stack_lvl+0xd6/0x122 [ 227.062389][T20355] dump_stack+0x11/0x1b [ 227.066548][T20355] should_fail+0x23c/0x250 [ 227.070959][T20355] should_fail_usercopy+0x16/0x20 [ 227.075982][T20355] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 227.081869][T20355] ? shmem_write_begin+0x7e/0x100 [ 227.086942][T20355] generic_perform_write+0x201/0x3e0 [ 227.092214][T20355] __generic_file_write_iter+0x174/0x310 [ 227.097858][T20355] ? generic_write_checks+0x250/0x290 [ 227.103226][T20355] generic_file_write_iter+0x75/0x130 [ 227.108623][T20355] vfs_write+0x7bc/0x900 [ 227.112856][T20355] __x64_sys_pwrite64+0xf5/0x150 [ 227.117927][T20355] do_syscall_64+0x44/0xa0 [ 227.122394][T20355] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 227.128298][T20355] RIP: 0033:0x7fa5b3cb58a7 [ 227.132700][T20355] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 227.152360][T20355] RSP: 002b:00007fa5b1a79f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 227.160768][T20355] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3cb58a7 17:42:57 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x33, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:58 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xf, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:58 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c09, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 227.168721][T20355] RDX: 000000000000001d RSI: 0000000020010e00 RDI: 0000000000000004 [ 227.176673][T20355] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 227.184633][T20355] R10: 0000000000001500 R11: 0000000000000293 R12: 0000000000000004 [ 227.192588][T20355] R13: 0000000000000004 R14: 00000000200005a0 R15: 0000000000000004 17:42:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x780500, 0x0) close(r0) [ 227.266856][T20372] loop3: detected capacity change from 0 to 1054 [ 227.283544][T20372] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 227.304789][T20372] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 227.332569][T20372] EXT4-fs (loop3): get root inode failed [ 227.338237][T20372] EXT4-fs (loop3): mount failed [ 227.344740][T20355] loop5: detected capacity change from 0 to 1054 [ 227.354871][T20355] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 227.377186][T20355] EXT4-fs (loop5): orphan cleanup on readonly fs [ 227.383591][T20355] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 227.397336][T20355] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 227.408252][T20355] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 227.422244][T20355] EXT4-fs (loop5): Cannot turn on quotas: error -117 17:42:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 16) 17:42:58 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 227.428939][T20355] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 227.452057][T20372] loop3: detected capacity change from 0 to 1054 [ 227.470025][T20372] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 227.518816][T20404] FAULT_INJECTION: forcing a failure. [ 227.518816][T20404] name failslab, interval 1, probability 0, space 0, times 0 [ 227.531633][T20404] CPU: 0 PID: 20404 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 227.540400][T20404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.540414][T20404] Call Trace: [ 227.540422][T20404] dump_stack_lvl+0xd6/0x122 [ 227.540447][T20404] dump_stack+0x11/0x1b [ 227.540464][T20404] should_fail+0x23c/0x250 17:42:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x870000, 0x0) close(r0) [ 227.540540][T20404] ? getname_flags+0x84/0x3f0 [ 227.540618][T20404] __should_failslab+0x81/0x90 [ 227.540637][T20404] should_failslab+0x5/0x20 [ 227.540655][T20404] kmem_cache_alloc+0x4f/0x300 [ 227.540672][T20404] getname_flags+0x84/0x3f0 [ 227.574223][T20372] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 227.576470][T20404] getname+0x15/0x20 [ 227.581166][T20372] EXT4-fs (loop3): get root inode failed [ 227.585708][T20404] do_sys_openat2+0x6d/0x2b0 [ 227.585747][T20404] __x64_sys_openat+0xef/0x110 [ 227.590244][T20372] EXT4-fs (loop3): mount failed [ 227.602256][T20404] do_syscall_64+0x44/0xa0 [ 227.602282][T20404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 227.636136][T20404] RIP: 0033:0x7fa5b3cb57f4 [ 227.640549][T20404] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 227.660266][T20404] RSP: 002b:00007fa5b1a79ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 17:42:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x900100, 0x0) close(r0) 17:42:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 17) [ 227.668680][T20404] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3cb57f4 [ 227.676652][T20404] RDX: 0000000000000002 RSI: 00007fa5b1a7a000 RDI: 00000000ffffff9c [ 227.684617][T20404] RBP: 00007fa5b1a7a000 R08: 0000000000000000 R09: ffffffffffffffff [ 227.692588][T20404] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 227.700645][T20404] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 17:42:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0a, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:42:58 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x10, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:42:58 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x34, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:42:58 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2d, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 227.789693][T20425] loop3: detected capacity change from 0 to 1054 [ 227.811500][T20431] FAULT_INJECTION: forcing a failure. [ 227.811500][T20431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.824594][T20431] CPU: 0 PID: 20431 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 227.833352][T20431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.843393][T20431] Call Trace: [ 227.846659][T20431] dump_stack_lvl+0xd6/0x122 [ 227.847563][T20425] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 227.851290][T20431] dump_stack+0x11/0x1b [ 227.864616][T20431] should_fail+0x23c/0x250 [ 227.869030][T20431] should_fail_usercopy+0x16/0x20 [ 227.874057][T20431] strncpy_from_user+0x21/0x250 [ 227.878972][T20431] getname_flags+0xb8/0x3f0 [ 227.883525][T20431] getname+0x15/0x20 [ 227.887427][T20431] do_sys_openat2+0x6d/0x2b0 [ 227.892016][T20431] __x64_sys_openat+0xef/0x110 [ 227.896776][T20431] do_syscall_64+0x44/0xa0 [ 227.901197][T20431] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 227.907125][T20431] RIP: 0033:0x7fa5b3cb57f4 [ 227.911530][T20431] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 227.931165][T20431] RSP: 002b:00007fa5b1a79ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 227.939598][T20431] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3cb57f4 [ 227.947572][T20431] RDX: 0000000000000002 RSI: 00007fa5b1a7a000 RDI: 00000000ffffff9c [ 227.955610][T20431] RBP: 00007fa5b1a7a000 R08: 0000000000000000 R09: ffffffffffffffff [ 227.963585][T20431] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 227.971710][T20431] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 17:42:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x900500, 0x0) close(r0) 17:42:58 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 18) [ 227.985834][T20425] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 228.017373][T20425] EXT4-fs (loop3): get root inode failed [ 228.023046][T20425] EXT4-fs (loop3): mount failed [ 228.070000][T20452] FAULT_INJECTION: forcing a failure. [ 228.070000][T20452] name failslab, interval 1, probability 0, space 0, times 0 [ 228.082659][T20452] CPU: 0 PID: 20452 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 228.091516][T20452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.091530][T20452] Call Trace: [ 228.091536][T20452] dump_stack_lvl+0xd6/0x122 [ 228.091560][T20452] dump_stack+0x11/0x1b [ 228.091576][T20452] should_fail+0x23c/0x250 [ 228.091660][T20452] ? __alloc_file+0x2e/0x1a0 [ 228.091684][T20452] __should_failslab+0x81/0x90 [ 228.091702][T20452] should_failslab+0x5/0x20 [ 228.091720][T20452] kmem_cache_alloc+0x4f/0x300 [ 228.091736][T20452] __alloc_file+0x2e/0x1a0 [ 228.091757][T20452] alloc_empty_file+0xcd/0x1c0 [ 228.091883][T20452] path_openat+0x6a/0x1ec0 [ 228.091906][T20452] ? copy_page_from_iter_atomic+0x44b/0xbb0 [ 228.091925][T20452] ? set_page_dirty+0xf4/0x1a0 [ 228.091948][T20452] ? shmem_write_end+0x37d/0x3d0 [ 228.091963][T20452] ? balance_dirty_pages_ratelimited+0xc4/0x2a0 [ 228.092005][T20452] ? generic_perform_write+0x377/0x3e0 [ 228.092041][T20452] do_filp_open+0x105/0x220 [ 228.092066][T20452] do_sys_openat2+0xb5/0x2b0 [ 228.092087][T20452] __x64_sys_openat+0xef/0x110 [ 228.092139][T20452] do_syscall_64+0x44/0xa0 17:42:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 19) [ 228.092185][T20452] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 228.092208][T20452] RIP: 0033:0x7fa5b3cb57f4 [ 228.092220][T20452] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 228.092239][T20452] RSP: 002b:00007fa5b1a79ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 228.092255][T20452] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3cb57f4 [ 228.092278][T20452] RDX: 0000000000000002 RSI: 00007fa5b1a7a000 RDI: 00000000ffffff9c [ 228.092289][T20452] RBP: 00007fa5b1a7a000 R08: 0000000000000000 R09: ffffffffffffffff [ 228.092299][T20452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 228.092309][T20452] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 228.114556][T20425] loop3: detected capacity change from 0 to 1054 [ 228.114914][T20425] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 228.135713][T20425] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 228.173409][T20465] FAULT_INJECTION: forcing a failure. [ 228.173409][T20465] name failslab, interval 1, probability 0, space 0, times 0 [ 228.205273][T20425] EXT4-fs (loop3): get root inode failed [ 228.207609][T20465] CPU: 0 PID: 20465 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 228.212355][T20425] EXT4-fs (loop3): mount failed [ 228.216833][T20465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.216846][T20465] Call Trace: [ 228.216852][T20465] dump_stack_lvl+0xd6/0x122 [ 228.281082][ C1] scsi_io_completion_action: 5 callbacks suppressed [ 228.281107][ C1] sd 0:0:1:0: tag#266 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 228.287012][T20465] dump_stack+0x11/0x1b [ 228.295062][ C1] sd 0:0:1:0: tag#266 CDB: opcode=0xe5 (vendor) [ 228.301440][T20465] should_fail+0x23c/0x250 [ 228.301466][T20465] ? security_file_alloc+0x30/0x190 [ 228.310777][ C1] sd 0:0:1:0: tag#266 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 228.322690][T20465] __should_failslab+0x81/0x90 [ 228.322712][T20465] should_failslab+0x5/0x20 [ 228.335550][ C1] sd 0:0:1:0: tag#266 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 228.341156][T20465] kmem_cache_alloc+0x4f/0x300 [ 228.341182][T20465] security_file_alloc+0x30/0x190 [ 228.349941][ C1] sd 0:0:1:0: tag#266 CDB[20]: 80 19 [ 228.354753][T20465] __alloc_file+0x83/0x1a0 [ 228.354782][T20465] alloc_empty_file+0xcd/0x1c0 [ 228.460498][T20465] path_openat+0x6a/0x1ec0 [ 228.464931][T20465] ? copy_page_from_iter_atomic+0x44b/0xbb0 17:42:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xc80500, 0x0) close(r0) [ 228.470961][T20465] ? set_page_dirty+0xf4/0x1a0 [ 228.475737][T20465] ? shmem_write_end+0x37d/0x3d0 [ 228.480747][T20465] ? balance_dirty_pages_ratelimited+0xc4/0x2a0 [ 228.487079][T20465] ? generic_perform_write+0x377/0x3e0 [ 228.492671][T20465] do_filp_open+0x105/0x220 [ 228.497402][T20465] do_sys_openat2+0xb5/0x2b0 [ 228.502001][T20465] __x64_sys_openat+0xef/0x110 [ 228.506764][T20465] do_syscall_64+0x44/0xa0 [ 228.511189][T20465] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 228.517091][T20465] RIP: 0033:0x7fa5b3cb57f4 [ 228.521575][T20465] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 228.541530][T20465] RSP: 002b:00007fa5b1a79ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 228.549971][T20465] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3cb57f4 [ 228.557957][T20465] RDX: 0000000000000002 RSI: 00007fa5b1a7a000 RDI: 00000000ffffff9c 17:42:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 20) [ 228.565952][T20465] RBP: 00007fa5b1a7a000 R08: 0000000000000000 R09: ffffffffffffffff [ 228.574026][T20465] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 228.582001][T20465] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 17:42:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0b, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:42:59 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x35, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 228.666602][T20483] loop3: detected capacity change from 0 to 1054 [ 228.687653][T20484] FAULT_INJECTION: forcing a failure. [ 228.687653][T20484] name failslab, interval 1, probability 0, space 0, times 0 [ 228.700299][T20484] CPU: 0 PID: 20484 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 228.709061][T20484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.719113][T20484] Call Trace: [ 228.722388][T20484] dump_stack_lvl+0xd6/0x122 [ 228.726972][T20484] dump_stack+0x11/0x1b [ 228.731114][T20484] should_fail+0x23c/0x250 [ 228.735561][T20484] ? kzalloc+0x16/0x20 [ 228.739616][T20484] __should_failslab+0x81/0x90 [ 228.744360][T20484] should_failslab+0x5/0x20 [ 228.748848][T20484] __kmalloc+0x6f/0x350 [ 228.752987][T20484] ? _atomic_dec_and_lock+0x60/0xd0 [ 228.758230][T20484] kzalloc+0x16/0x20 [ 228.762110][T20484] alloc_workqueue+0x12f/0xad0 [ 228.766861][T20484] ? disk_unblock_events+0x35/0x40 [ 228.771976][T20484] ? bd_prepare_to_claim+0x1e6/0x270 [ 228.777248][T20484] ? loop_attr_do_show_dio+0x70/0x70 [ 228.782520][T20484] ? loop_set_status_from_info+0x35e/0x3a0 [ 228.788313][T20484] loop_configure+0x681/0xeb0 [ 228.792974][T20484] lo_ioctl+0x618/0x13e0 [ 228.797201][T20484] ? path_openat+0x18d4/0x1ec0 [ 228.801982][T20484] ? blkdev_common_ioctl+0x438/0x1110 [ 228.807336][T20484] ? selinux_file_ioctl+0x981/0xa10 [ 228.812520][T20484] ? lo_release+0x120/0x120 [ 228.817007][T20484] blkdev_ioctl+0x1d0/0x3f0 [ 228.821561][T20484] block_ioctl+0x6e/0x80 [ 228.825853][T20484] ? blkdev_iopoll+0x80/0x80 [ 228.830480][T20484] __se_sys_ioctl+0xcb/0x140 [ 228.835143][T20484] __x64_sys_ioctl+0x3f/0x50 [ 228.839714][T20484] do_syscall_64+0x44/0xa0 [ 228.844125][T20484] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 228.850145][T20484] RIP: 0033:0x7fa5b3d02697 [ 228.854544][T20484] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 228.874132][T20484] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.882567][T20484] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 228.890519][T20484] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 228.898472][T20484] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 228.906494][T20484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 17:42:59 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2f, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:42:59 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x55, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 228.914444][T20484] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 17:42:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xd00500, 0x0) close(r0) [ 228.962544][ C0] sd 0:0:1:0: tag#269 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 228.972308][ C0] sd 0:0:1:0: tag#269 CDB: opcode=0xe5 (vendor) [ 228.978730][ C0] sd 0:0:1:0: tag#269 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 228.987727][ C0] sd 0:0:1:0: tag#269 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 228.996692][ C0] sd 0:0:1:0: tag#269 CDB[20]: 80 19 [ 228.998188][T20483] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 229.051963][T20483] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:42:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 21) 17:42:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xd80400, 0x0) close(r0) [ 229.092341][T20483] EXT4-fs (loop3): get root inode failed [ 229.098072][T20483] EXT4-fs (loop3): mount failed [ 229.147331][T20513] FAULT_INJECTION: forcing a failure. [ 229.147331][T20513] name failslab, interval 1, probability 0, space 0, times 0 [ 229.160320][T20513] CPU: 1 PID: 20513 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 229.169096][T20513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.179146][T20513] Call Trace: [ 229.182416][T20513] dump_stack_lvl+0xd6/0x122 [ 229.187024][T20513] dump_stack+0x11/0x1b [ 229.191217][T20513] should_fail+0x23c/0x250 17:42:59 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x36, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 229.195690][T20513] __should_failslab+0x81/0x90 [ 229.200530][T20513] ? alloc_workqueue+0x15d/0xad0 [ 229.205541][T20513] should_failslab+0x5/0x20 [ 229.210044][T20513] kmem_cache_alloc_trace+0x52/0x320 [ 229.215408][T20513] alloc_workqueue+0x15d/0xad0 [ 229.220197][T20513] ? disk_unblock_events+0x35/0x40 [ 229.225382][T20513] ? bd_prepare_to_claim+0x1e6/0x270 [ 229.230693][T20513] ? loop_attr_do_show_dio+0x70/0x70 [ 229.236059][T20513] ? loop_set_status_from_info+0x35e/0x3a0 [ 229.241960][T20513] loop_configure+0x681/0xeb0 [ 229.246646][T20513] lo_ioctl+0x618/0x13e0 [ 229.250890][T20513] ? path_openat+0x18d4/0x1ec0 [ 229.255660][T20513] ? blkdev_common_ioctl+0x438/0x1110 [ 229.261217][T20513] ? selinux_file_ioctl+0x981/0xa10 [ 229.266489][T20513] ? lo_release+0x120/0x120 [ 229.271076][T20513] blkdev_ioctl+0x1d0/0x3f0 [ 229.275568][T20513] block_ioctl+0x6e/0x80 [ 229.279837][T20513] ? blkdev_iopoll+0x80/0x80 [ 229.284483][T20513] __se_sys_ioctl+0xcb/0x140 [ 229.289163][T20513] __x64_sys_ioctl+0x3f/0x50 [ 229.293755][T20513] do_syscall_64+0x44/0xa0 [ 229.298248][T20513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 229.304149][T20513] RIP: 0033:0x7fa5b3d02697 [ 229.308557][T20513] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 229.328236][T20513] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.336650][T20513] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 229.344625][T20513] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 229.352696][T20513] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 229.360667][T20513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 229.368638][T20513] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 17:43:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 22) 17:43:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xd80500, 0x0) close(r0) [ 229.394359][T20483] loop3: detected capacity change from 0 to 1054 [ 229.401299][T20483] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:00 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x37, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 229.468724][T20483] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 229.510956][ C0] sd 0:0:1:0: tag#282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 229.520719][ C0] sd 0:0:1:0: tag#282 CDB: opcode=0xe5 (vendor) [ 229.527032][ C0] sd 0:0:1:0: tag#282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 229.535993][ C0] sd 0:0:1:0: tag#282 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 229.544961][ C0] sd 0:0:1:0: tag#282 CDB[20]: 80 19 [ 229.571045][T20541] FAULT_INJECTION: forcing a failure. [ 229.571045][T20541] name failslab, interval 1, probability 0, space 0, times 0 [ 229.584515][T20541] CPU: 1 PID: 20541 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 229.593303][T20541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.603384][T20541] Call Trace: [ 229.606661][T20541] dump_stack_lvl+0xd6/0x122 [ 229.611262][T20541] dump_stack+0x11/0x1b [ 229.615410][T20541] should_fail+0x23c/0x250 [ 229.619824][T20541] ? kzalloc+0x16/0x20 [ 229.624056][T20541] __should_failslab+0x81/0x90 [ 229.628866][T20541] should_failslab+0x5/0x20 [ 229.633354][T20541] __kmalloc+0x6f/0x350 [ 229.637489][T20541] ? number+0xa13/0xb60 [ 229.641658][T20541] kzalloc+0x16/0x20 [ 229.645538][T20541] apply_wqattrs_prepare+0x3a/0x630 [ 229.650717][T20541] ? vsnprintf+0xe8f/0xed0 [ 229.655182][T20541] apply_workqueue_attrs+0x9e/0x100 [ 229.660403][T20541] alloc_workqueue+0x777/0xad0 [ 229.665173][T20541] ? disk_unblock_events+0x35/0x40 [ 229.670267][T20541] ? bd_prepare_to_claim+0x1e6/0x270 [ 229.675590][T20541] ? loop_attr_do_show_dio+0x70/0x70 [ 229.680861][T20541] ? loop_set_status_from_info+0x35e/0x3a0 [ 229.686737][T20541] loop_configure+0x681/0xeb0 [ 229.691482][T20541] lo_ioctl+0x618/0x13e0 [ 229.695705][T20541] ? path_openat+0x18d4/0x1ec0 [ 229.700454][T20541] ? blkdev_common_ioctl+0x438/0x1110 [ 229.705864][T20541] ? selinux_file_ioctl+0x981/0xa10 [ 229.711048][T20541] ? lo_release+0x120/0x120 [ 229.715552][T20541] blkdev_ioctl+0x1d0/0x3f0 [ 229.720036][T20541] block_ioctl+0x6e/0x80 [ 229.724281][T20541] ? blkdev_iopoll+0x80/0x80 [ 229.728890][T20541] __se_sys_ioctl+0xcb/0x140 [ 229.733478][T20541] __x64_sys_ioctl+0x3f/0x50 [ 229.738048][T20541] do_syscall_64+0x44/0xa0 [ 229.742452][T20541] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 229.748361][T20541] RIP: 0033:0x7fa5b3d02697 [ 229.752766][T20541] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 229.772357][T20541] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.780754][T20541] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 229.788709][T20541] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 229.796660][T20541] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 229.804723][T20541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 229.812942][T20541] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 17:43:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 23) [ 229.820951][T20483] EXT4-fs (loop3): get root inode failed [ 229.826584][T20483] EXT4-fs (loop3): mount failed [ 229.888602][T20550] FAULT_INJECTION: forcing a failure. [ 229.888602][T20550] name failslab, interval 1, probability 0, space 0, times 0 [ 229.901319][T20550] CPU: 1 PID: 20550 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 229.910106][T20550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.920275][T20550] Call Trace: [ 229.923552][T20550] dump_stack_lvl+0xd6/0x122 [ 229.928147][T20550] dump_stack+0x11/0x1b [ 229.932310][T20550] should_fail+0x23c/0x250 [ 229.936730][T20550] __should_failslab+0x81/0x90 [ 229.941572][T20550] ? apply_wqattrs_prepare+0x5f/0x630 [ 229.946932][T20550] should_failslab+0x5/0x20 [ 229.951562][T20550] kmem_cache_alloc_trace+0x52/0x320 [ 229.956842][T20550] apply_wqattrs_prepare+0x5f/0x630 [ 229.962036][T20550] ? vsnprintf+0xe8f/0xed0 [ 229.966502][T20550] apply_workqueue_attrs+0x9e/0x100 [ 229.971698][T20550] alloc_workqueue+0x777/0xad0 [ 229.976461][T20550] ? disk_unblock_events+0x35/0x40 [ 229.981589][T20550] ? bd_prepare_to_claim+0x1e6/0x270 [ 229.986873][T20550] ? loop_attr_do_show_dio+0x70/0x70 [ 229.992152][T20550] ? loop_set_status_from_info+0x35e/0x3a0 [ 229.997989][T20550] loop_configure+0x681/0xeb0 [ 230.002681][T20550] lo_ioctl+0x618/0x13e0 [ 230.006924][T20550] ? path_openat+0x18d4/0x1ec0 [ 230.011694][T20550] ? blkdev_common_ioctl+0x438/0x1110 [ 230.017057][T20550] ? selinux_file_ioctl+0x981/0xa10 [ 230.022280][T20550] ? lo_release+0x120/0x120 [ 230.026774][T20550] blkdev_ioctl+0x1d0/0x3f0 [ 230.031336][T20550] block_ioctl+0x6e/0x80 [ 230.035566][T20550] ? blkdev_iopoll+0x80/0x80 [ 230.040326][T20550] __se_sys_ioctl+0xcb/0x140 [ 230.044908][T20550] __x64_sys_ioctl+0x3f/0x50 [ 230.049486][T20550] do_syscall_64+0x44/0xa0 [ 230.053926][T20550] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 230.059887][T20550] RIP: 0033:0x7fa5b3d02697 [ 230.064363][T20550] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:43:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0c, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:00 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xc8, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:00 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x30, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xe00500, 0x0) close(r0) [ 230.083969][T20550] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.092383][T20550] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 230.100349][T20550] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 230.108388][T20550] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 230.116352][T20550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 230.124304][T20550] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 17:43:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 24) 17:43:00 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x38, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 230.210337][T20567] loop3: detected capacity change from 0 to 1054 [ 230.217042][ C1] sd 0:0:1:0: tag#287 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 230.226790][ C1] sd 0:0:1:0: tag#287 CDB: opcode=0xe5 (vendor) [ 230.233028][ C1] sd 0:0:1:0: tag#287 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 230.241977][ C1] sd 0:0:1:0: tag#287 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 230.245663][T20575] FAULT_INJECTION: forcing a failure. [ 230.245663][T20575] name failslab, interval 1, probability 0, space 0, times 0 [ 230.251013][ C1] sd 0:0:1:0: tag#287 CDB[20]: 80 19 [ 230.268878][T20575] CPU: 0 PID: 20575 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 230.277670][T20575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.287723][T20575] Call Trace: [ 230.290991][T20575] dump_stack_lvl+0xd6/0x122 [ 230.295585][T20575] dump_stack+0x11/0x1b [ 230.299740][T20575] should_fail+0x23c/0x250 [ 230.304236][T20575] __should_failslab+0x81/0x90 [ 230.309003][T20575] ? apply_wqattrs_prepare+0xbe/0x630 [ 230.314366][T20575] should_failslab+0x5/0x20 [ 230.318879][T20575] kmem_cache_alloc_trace+0x52/0x320 [ 230.318903][T20575] ? apply_wqattrs_prepare+0x5f/0x630 [ 230.329523][T20575] apply_wqattrs_prepare+0xbe/0x630 [ 230.334811][T20575] ? vsnprintf+0xe8f/0xed0 [ 230.339241][T20575] apply_workqueue_attrs+0x9e/0x100 [ 230.344460][T20575] alloc_workqueue+0x777/0xad0 [ 230.349224][T20575] ? disk_unblock_events+0x35/0x40 [ 230.354342][T20575] ? bd_prepare_to_claim+0x1e6/0x270 [ 230.359625][T20575] ? loop_attr_do_show_dio+0x70/0x70 [ 230.364912][T20575] ? loop_set_status_from_info+0x35e/0x3a0 [ 230.370717][T20575] loop_configure+0x681/0xeb0 [ 230.375395][T20575] lo_ioctl+0x618/0x13e0 [ 230.379640][T20575] ? path_openat+0x18d4/0x1ec0 [ 230.384431][T20575] ? blkdev_common_ioctl+0x438/0x1110 [ 230.389801][T20575] ? selinux_file_ioctl+0x981/0xa10 [ 230.395015][T20575] ? lo_release+0x120/0x120 [ 230.399518][T20575] blkdev_ioctl+0x1d0/0x3f0 [ 230.404023][T20575] block_ioctl+0x6e/0x80 [ 230.408266][T20575] ? blkdev_iopoll+0x80/0x80 [ 230.412858][T20575] __se_sys_ioctl+0xcb/0x140 [ 230.417867][T20575] __x64_sys_ioctl+0x3f/0x50 [ 230.422457][T20575] do_syscall_64+0x44/0xa0 [ 230.426875][T20575] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 230.432779][T20575] RIP: 0033:0x7fa5b3d02697 [ 230.437194][T20575] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 230.456842][T20575] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.465354][T20575] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 230.473322][T20575] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 230.481420][T20575] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 230.489385][T20575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 230.497624][T20575] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 230.515869][T20567] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 230.544101][T20567] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:43:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 25) [ 230.590277][T20567] EXT4-fs (loop3): get root inode failed [ 230.595962][T20567] EXT4-fs (loop3): mount failed [ 230.657742][T20567] loop3: detected capacity change from 0 to 1054 [ 230.664164][T20595] FAULT_INJECTION: forcing a failure. [ 230.664164][T20595] name failslab, interval 1, probability 0, space 0, times 0 [ 230.676935][T20595] CPU: 0 PID: 20595 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 230.685732][T20595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.695855][T20595] Call Trace: [ 230.699125][T20595] dump_stack_lvl+0xd6/0x122 [ 230.703722][T20595] dump_stack+0x11/0x1b [ 230.707892][T20595] should_fail+0x23c/0x250 [ 230.712304][T20595] __should_failslab+0x81/0x90 [ 230.717116][T20595] should_failslab+0x5/0x20 [ 230.721619][T20595] kmem_cache_alloc_node+0x61/0x2c0 [ 230.726815][T20595] ? alloc_unbound_pwq+0x3e6/0x780 [ 230.731938][T20595] alloc_unbound_pwq+0x3e6/0x780 [ 230.736962][T20595] apply_wqattrs_prepare+0x1ed/0x630 [ 230.742246][T20595] ? vsnprintf+0xe8f/0xed0 [ 230.746737][T20595] apply_workqueue_attrs+0x9e/0x100 [ 230.751947][T20595] alloc_workqueue+0x777/0xad0 [ 230.756925][T20595] ? disk_unblock_events+0x35/0x40 [ 230.762044][T20595] ? bd_prepare_to_claim+0x1e6/0x270 [ 230.767398][T20595] ? loop_attr_do_show_dio+0x70/0x70 [ 230.772732][T20595] ? loop_set_status_from_info+0x35e/0x3a0 [ 230.773441][ C1] sd 0:0:1:0: tag#314 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 230.778546][T20595] loop_configure+0x681/0xeb0 [ 230.788302][ C1] sd 0:0:1:0: tag#314 CDB: opcode=0xe5 (vendor) [ 230.792914][T20595] lo_ioctl+0x618/0x13e0 [ 230.792940][T20595] ? path_openat+0x18d4/0x1ec0 [ 230.799153][ C1] sd 0:0:1:0: tag#314 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 230.803360][T20595] ? blkdev_common_ioctl+0x438/0x1110 [ 230.808112][ C1] sd 0:0:1:0: tag#314 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 230.817004][T20595] ? selinux_file_ioctl+0x981/0xa10 [ 230.822368][ C1] sd 0:0:1:0: tag#314 CDB[20]: 80 19 [ 230.831262][T20595] ? lo_release+0x120/0x120 [ 230.831285][T20595] blkdev_ioctl+0x1d0/0x3f0 [ 230.850665][T20595] block_ioctl+0x6e/0x80 [ 230.854988][T20595] ? blkdev_iopoll+0x80/0x80 [ 230.859574][T20595] __se_sys_ioctl+0xcb/0x140 [ 230.864206][T20595] __x64_sys_ioctl+0x3f/0x50 [ 230.868800][T20595] do_syscall_64+0x44/0xa0 [ 230.873220][T20595] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 230.879115][T20595] RIP: 0033:0x7fa5b3d02697 [ 230.883566][T20595] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:43:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xe00600, 0x0) close(r0) 17:43:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0d, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 230.903167][T20595] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.911670][T20595] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 17:43:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 26) [ 230.911687][T20595] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 230.911700][T20595] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 17:43:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x39, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:01 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x31, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 230.911713][T20595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 230.911725][T20595] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 230.977555][T20604] loop3: detected capacity change from 0 to 1054 [ 230.982324][T20604] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 230.999154][T20604] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 231.030139][T20614] FAULT_INJECTION: forcing a failure. [ 231.030139][T20614] name failslab, interval 1, probability 0, space 0, times 0 [ 231.060245][T20614] CPU: 1 PID: 20614 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 231.069020][T20614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.079101][T20614] Call Trace: [ 231.082365][T20614] dump_stack_lvl+0xd6/0x122 [ 231.086941][T20614] dump_stack+0x11/0x1b [ 231.091079][T20614] should_fail+0x23c/0x250 [ 231.095477][T20614] __should_failslab+0x81/0x90 [ 231.100225][T20614] ? kobject_uevent_env+0x1a7/0xc40 [ 231.105412][T20614] should_failslab+0x5/0x20 [ 231.109897][T20614] kmem_cache_alloc_trace+0x52/0x320 [ 231.115165][T20614] ? pwq_adjust_max_active+0x491/0x4b0 [ 231.120763][T20614] ? dev_uevent_filter+0x70/0x70 [ 231.125689][T20614] kobject_uevent_env+0x1a7/0xc40 [ 231.130760][T20614] ? __list_add_valid+0x28/0x90 [ 231.135594][T20614] ? alloc_workqueue+0xa18/0xad0 [ 231.140635][T20614] disk_force_media_change+0xe3/0x170 [ 231.146515][T20614] loop_configure+0x6c0/0xeb0 [ 231.151178][T20614] lo_ioctl+0x618/0x13e0 [ 231.155468][T20614] ? path_openat+0x18d4/0x1ec0 [ 231.160220][T20614] ? blkdev_common_ioctl+0x438/0x1110 [ 231.165579][T20614] ? selinux_file_ioctl+0x981/0xa10 [ 231.170830][T20614] ? lo_release+0x120/0x120 [ 231.175335][T20614] blkdev_ioctl+0x1d0/0x3f0 [ 231.179821][T20614] block_ioctl+0x6e/0x80 [ 231.184044][T20614] ? blkdev_iopoll+0x80/0x80 [ 231.188616][T20614] __se_sys_ioctl+0xcb/0x140 [ 231.193190][T20614] __x64_sys_ioctl+0x3f/0x50 [ 231.197761][T20614] do_syscall_64+0x44/0xa0 [ 231.202178][T20614] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 231.208109][T20614] RIP: 0033:0x7fa5b3d02697 [ 231.212517][T20614] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 231.232105][T20614] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.240615][T20614] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 231.248566][T20614] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 231.256520][T20614] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 231.264737][T20614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 231.272689][T20614] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 231.284771][T20614] loop5: detected capacity change from 0 to 1054 [ 231.294637][T20614] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 231.337092][T20604] EXT4-fs (loop3): get root inode failed [ 231.342782][T20604] EXT4-fs (loop3): mount failed [ 231.350503][T20614] EXT4-fs (loop5): orphan cleanup on readonly fs [ 231.356838][T20614] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 231.370588][T20614] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 17:43:02 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x281a2, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 231.381556][T20614] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 231.395655][T20614] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 231.402355][T20614] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.436488][T20604] loop3: detected capacity change from 0 to 1054 [ 231.444937][T20604] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 231.468101][ C1] sd 0:0:1:0: tag#309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 231.477879][ C1] sd 0:0:1:0: tag#309 CDB: opcode=0xe5 (vendor) 17:43:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xe80300, 0x0) close(r0) 17:43:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 27) [ 231.484142][ C1] sd 0:0:1:0: tag#309 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 231.493085][ C1] sd 0:0:1:0: tag#309 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 231.502041][ C1] sd 0:0:1:0: tag#309 CDB[20]: 80 19 [ 231.523569][T20604] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 231.536662][T20604] EXT4-fs (loop3): get root inode failed [ 231.543152][T20604] EXT4-fs (loop3): mount failed 17:43:02 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x32, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0e, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 231.597506][ C1] sd 0:0:1:0: tag#270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 231.607270][ C1] sd 0:0:1:0: tag#270 CDB: opcode=0xe5 (vendor) [ 231.613521][ C1] sd 0:0:1:0: tag#270 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 231.622474][ C1] sd 0:0:1:0: tag#270 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 231.631786][ C1] sd 0:0:1:0: tag#270 CDB[20]: 80 19 [ 231.691660][T20656] FAULT_INJECTION: forcing a failure. [ 231.691660][T20656] name failslab, interval 1, probability 0, space 0, times 0 [ 231.704350][T20656] CPU: 1 PID: 20656 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 231.713110][T20656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.723163][T20656] Call Trace: [ 231.726532][T20656] dump_stack_lvl+0xd6/0x122 [ 231.731383][T20656] dump_stack+0x11/0x1b [ 231.735639][T20656] should_fail+0x23c/0x250 17:43:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xe80500, 0x0) close(r0) 17:43:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0f, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 231.740065][T20656] ? kzalloc+0x1d/0x30 [ 231.744138][T20656] __should_failslab+0x81/0x90 [ 231.748894][T20656] should_failslab+0x5/0x20 [ 231.753396][T20656] __kmalloc+0x6f/0x350 [ 231.757600][T20656] kzalloc+0x1d/0x30 [ 231.761501][T20656] kobject_get_path+0x7c/0x110 [ 231.766309][T20656] kobject_uevent_env+0x1be/0xc40 [ 231.771327][T20656] ? __list_add_valid+0x28/0x90 [ 231.776169][T20656] ? alloc_workqueue+0xa18/0xad0 [ 231.781229][T20656] disk_force_media_change+0xe3/0x170 [ 231.786603][T20656] loop_configure+0x6c0/0xeb0 [ 231.791310][T20656] lo_ioctl+0x618/0x13e0 [ 231.795555][T20656] ? path_openat+0x18d4/0x1ec0 [ 231.800405][T20656] ? blkdev_common_ioctl+0x438/0x1110 [ 231.805772][T20656] ? selinux_file_ioctl+0x981/0xa10 [ 231.811051][T20656] ? lo_release+0x120/0x120 [ 231.815552][T20656] blkdev_ioctl+0x1d0/0x3f0 [ 231.820084][T20656] block_ioctl+0x6e/0x80 [ 231.824432][T20656] ? blkdev_iopoll+0x80/0x80 [ 231.829017][T20656] __se_sys_ioctl+0xcb/0x140 [ 231.833693][T20656] __x64_sys_ioctl+0x3f/0x50 17:43:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c10, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 231.838278][T20656] do_syscall_64+0x44/0xa0 [ 231.842691][T20656] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 231.848646][T20656] RIP: 0033:0x7fa5b3d02697 [ 231.853052][T20656] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 231.872683][T20656] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.881091][T20656] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 17:43:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xf00500, 0x0) close(r0) 17:43:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c11, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 231.889058][T20656] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 231.897024][T20656] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 231.904988][T20656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 231.912951][T20656] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 17:43:02 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 231.938718][T20656] loop5: detected capacity change from 0 to 1054 [ 231.946548][T20656] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 231.957994][T20656] EXT4-fs (loop5): orphan cleanup on readonly fs [ 231.964689][T20656] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 231.978489][T20656] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 17:43:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xf80200, 0x0) close(r0) 17:43:02 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0xffffffffffffffff, 0x0, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 28) 17:43:02 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x33, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 231.989488][T20656] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 232.003487][T20656] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 232.010226][T20656] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.023310][T20673] loop3: detected capacity change from 0 to 1054 [ 232.077070][T20673] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 232.126590][T20697] FAULT_INJECTION: forcing a failure. [ 232.126590][T20697] name failslab, interval 1, probability 0, space 0, times 0 [ 232.139755][T20697] CPU: 0 PID: 20697 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 232.148509][T20697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.159068][T20697] Call Trace: [ 232.162329][T20697] dump_stack_lvl+0xd6/0x122 [ 232.166907][T20697] dump_stack+0x11/0x1b [ 232.171048][T20697] should_fail+0x23c/0x250 [ 232.175453][T20697] __should_failslab+0x81/0x90 [ 232.180290][T20697] should_failslab+0x5/0x20 [ 232.184817][T20697] kmem_cache_alloc_node+0x61/0x2c0 [ 232.190019][T20697] ? __alloc_skb+0xed/0x420 [ 232.195374][T20697] __alloc_skb+0xed/0x420 [ 232.199688][T20697] alloc_uevent_skb+0x5b/0x120 [ 232.204456][T20697] kobject_uevent_env+0x863/0xc40 [ 232.209637][T20697] disk_force_media_change+0xe3/0x170 [ 232.215104][T20697] loop_configure+0x6c0/0xeb0 [ 232.220076][T20697] lo_ioctl+0x618/0x13e0 [ 232.224376][T20697] ? path_openat+0x18d4/0x1ec0 [ 232.229200][T20697] ? blkdev_common_ioctl+0x438/0x1110 [ 232.234550][T20697] ? selinux_file_ioctl+0x981/0xa10 [ 232.239733][T20697] ? lo_release+0x120/0x120 [ 232.244232][T20697] blkdev_ioctl+0x1d0/0x3f0 [ 232.248790][T20697] block_ioctl+0x6e/0x80 [ 232.253045][T20697] ? blkdev_iopoll+0x80/0x80 [ 232.257614][T20697] __se_sys_ioctl+0xcb/0x140 [ 232.262184][T20697] __x64_sys_ioctl+0x3f/0x50 [ 232.266757][T20697] do_syscall_64+0x44/0xa0 [ 232.271160][T20697] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 232.277146][T20697] RIP: 0033:0x7fa5b3d02697 [ 232.281602][T20697] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 232.301272][T20697] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.309756][T20697] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 232.317785][T20697] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 232.325738][T20697] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 232.333698][T20697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 232.341665][T20697] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 232.368117][T20673] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 232.378811][T20697] loop5: detected capacity change from 0 to 1054 [ 232.389286][ C1] sd 0:0:1:0: tag#265 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 232.399114][ C1] sd 0:0:1:0: tag#265 CDB: opcode=0xe5 (vendor) [ 232.404746][T20673] EXT4-fs (loop3): get root inode failed [ 232.405394][ C1] sd 0:0:1:0: tag#265 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 232.410986][T20673] EXT4-fs (loop3): mount failed [ 232.419894][ C1] sd 0:0:1:0: tag#265 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 232.419911][ C1] sd 0:0:1:0: tag#265 CDB[20]: 80 19 17:43:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xf80500, 0x0) close(r0) [ 232.494482][T20697] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 232.511041][T20697] EXT4-fs (loop5): orphan cleanup on readonly fs [ 232.517455][T20697] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 232.531261][T20697] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 232.542282][T20697] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 232.556384][T20697] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 232.563134][T20697] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.589391][T20673] loop3: detected capacity change from 0 to 1054 [ 232.605596][T20673] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 232.679281][T20673] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:43:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 29) [ 232.755765][T20673] EXT4-fs (loop3): get root inode failed [ 232.761441][T20673] EXT4-fs (loop3): mount failed [ 232.805262][ C0] sd 0:0:1:0: tag#291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 232.815169][ C0] sd 0:0:1:0: tag#291 CDB: opcode=0xe5 (vendor) [ 232.821522][ C0] sd 0:0:1:0: tag#291 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 232.830483][ C0] sd 0:0:1:0: tag#291 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 232.839456][ C0] sd 0:0:1:0: tag#291 CDB[20]: 80 19 [ 232.874988][T20732] FAULT_INJECTION: forcing a failure. [ 232.874988][T20732] name failslab, interval 1, probability 0, space 0, times 0 [ 232.887622][T20732] CPU: 0 PID: 20732 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 232.896379][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.906472][T20732] Call Trace: [ 232.909747][T20732] dump_stack_lvl+0xd6/0x122 [ 232.914401][T20732] dump_stack+0x11/0x1b [ 232.918639][T20732] should_fail+0x23c/0x250 17:43:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c12, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xfc0700, 0x0) close(r0) [ 232.923231][T20732] __should_failslab+0x81/0x90 [ 232.928019][T20732] should_failslab+0x5/0x20 [ 232.932611][T20732] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 232.938341][T20732] ? __kmalloc_node_track_caller+0x30/0x40 [ 232.944251][T20732] __kmalloc_node_track_caller+0x30/0x40 [ 232.949891][T20732] ? alloc_uevent_skb+0x5b/0x120 [ 232.954913][T20732] __alloc_skb+0x187/0x420 [ 232.959409][T20732] alloc_uevent_skb+0x5b/0x120 [ 232.964177][T20732] kobject_uevent_env+0x863/0xc40 [ 232.969208][T20732] disk_force_media_change+0xe3/0x170 [ 232.974703][T20732] loop_configure+0x6c0/0xeb0 [ 232.979382][T20732] lo_ioctl+0x618/0x13e0 [ 232.983624][T20732] ? path_openat+0x18d4/0x1ec0 [ 232.988396][T20732] ? blkdev_common_ioctl+0x438/0x1110 [ 232.993825][T20732] ? selinux_file_ioctl+0x981/0xa10 [ 232.999043][T20732] ? lo_release+0x120/0x120 [ 233.003650][T20732] blkdev_ioctl+0x1d0/0x3f0 [ 233.008157][T20732] block_ioctl+0x6e/0x80 [ 233.012455][T20732] ? blkdev_iopoll+0x80/0x80 [ 233.017043][T20732] __se_sys_ioctl+0xcb/0x140 17:43:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xfe0700, 0x0) close(r0) [ 233.021630][T20732] __x64_sys_ioctl+0x3f/0x50 [ 233.026218][T20732] do_syscall_64+0x44/0xa0 [ 233.030634][T20732] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 233.036533][T20732] RIP: 0033:0x7fa5b3d02697 [ 233.041097][T20732] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 233.060812][T20732] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.069229][T20732] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 233.077210][T20732] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 233.085236][T20732] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 233.093202][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 233.101271][T20732] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 233.156970][T20732] loop5: detected capacity change from 0 to 1054 17:43:03 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:03 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 30) 17:43:03 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x34, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 233.200285][T20751] loop3: detected capacity change from 0 to 1054 [ 233.222770][T20751] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x1000000, 0x0) close(r0) [ 233.277872][T20751] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 233.281220][T20767] FAULT_INJECTION: forcing a failure. [ 233.281220][T20767] name failslab, interval 1, probability 0, space 0, times 0 [ 233.302725][T20767] CPU: 0 PID: 20767 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 233.311511][T20767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.321625][T20767] Call Trace: [ 233.324978][T20767] dump_stack_lvl+0xd6/0x122 [ 233.329571][T20767] dump_stack+0x11/0x1b [ 233.333729][T20767] should_fail+0x23c/0x250 [ 233.338211][T20767] ? skb_clone+0x12c/0x1f0 [ 233.342642][T20767] __should_failslab+0x81/0x90 [ 233.347496][T20767] should_failslab+0x5/0x20 [ 233.352069][T20767] kmem_cache_alloc+0x4f/0x300 [ 233.356967][T20767] skb_clone+0x12c/0x1f0 [ 233.361209][T20767] netlink_broadcast_filtered+0x4fd/0xb60 [ 233.367015][T20767] ? skb_put+0xb9/0xf0 [ 233.371084][T20767] netlink_broadcast+0x35/0x50 [ 233.375907][T20767] kobject_uevent_env+0x8c9/0xc40 [ 233.380943][T20767] disk_force_media_change+0xe3/0x170 [ 233.386323][T20767] loop_configure+0x6c0/0xeb0 [ 233.391019][T20767] lo_ioctl+0x618/0x13e0 [ 233.395266][T20767] ? path_openat+0x18d4/0x1ec0 [ 233.400042][T20767] ? blkdev_common_ioctl+0x438/0x1110 [ 233.405478][T20767] ? selinux_file_ioctl+0x981/0xa10 [ 233.410689][T20767] ? lo_release+0x120/0x120 [ 233.415510][T20767] blkdev_ioctl+0x1d0/0x3f0 [ 233.420158][T20767] block_ioctl+0x6e/0x80 17:43:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x11a0200, 0x0) close(r0) [ 233.424491][T20767] ? blkdev_iopoll+0x80/0x80 [ 233.429083][T20767] __se_sys_ioctl+0xcb/0x140 [ 233.433719][T20767] __x64_sys_ioctl+0x3f/0x50 [ 233.438394][T20767] do_syscall_64+0x44/0xa0 [ 233.442916][T20767] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 233.448854][T20767] RIP: 0033:0x7fa5b3d02697 [ 233.453346][T20767] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 233.473650][T20767] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.482169][T20767] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 233.490141][T20767] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 233.498200][T20767] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 233.506294][T20767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 233.514264][T20767] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 233.534705][T20751] EXT4-fs (loop3): get root inode failed [ 233.540434][T20751] EXT4-fs (loop3): mount failed [ 233.545479][ C1] sd 0:0:1:0: tag#290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 233.555304][ C1] sd 0:0:1:0: tag#290 CDB: opcode=0xe5 (vendor) [ 233.561892][ C1] sd 0:0:1:0: tag#290 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 233.571115][ C1] sd 0:0:1:0: tag#290 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 233.580199][ C1] sd 0:0:1:0: tag#290 CDB[20]: 80 19 [ 233.589691][T20767] loop5: detected capacity change from 0 to 1054 [ 233.599282][T20767] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 233.630540][T20767] EXT4-fs (loop5): orphan cleanup on readonly fs [ 233.636890][T20767] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 233.650626][T20767] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 233.661564][T20767] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:04 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x11e0100, 0x0) close(r0) 17:43:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 31) [ 233.675584][T20767] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 233.682370][T20767] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.709833][ C1] sd 0:0:1:0: tag#256 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 233.719584][ C1] sd 0:0:1:0: tag#256 CDB: opcode=0xe5 (vendor) [ 233.725862][ C1] sd 0:0:1:0: tag#256 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 233.734830][ C1] sd 0:0:1:0: tag#256 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 233.743791][ C1] sd 0:0:1:0: tag#256 CDB[20]: 80 19 [ 233.763940][T20751] loop3: detected capacity change from 0 to 1054 [ 233.774096][T20751] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 233.810548][T20751] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 233.823300][T20811] FAULT_INJECTION: forcing a failure. [ 233.823300][T20811] name failslab, interval 1, probability 0, space 0, times 0 [ 233.836065][T20811] CPU: 1 PID: 20811 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 233.836098][T20751] EXT4-fs (loop3): get root inode failed [ 233.844821][T20811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.844836][T20811] Call Trace: [ 233.844843][T20811] dump_stack_lvl+0xd6/0x122 [ 233.844866][T20811] dump_stack+0x11/0x1b [ 233.850506][T20751] EXT4-fs (loop3): mount failed [ 233.861757][T20811] should_fail+0x23c/0x250 [ 233.861780][T20811] __should_failslab+0x81/0x90 [ 233.861799][T20811] ? call_usermodehelper_setup+0x71/0x190 [ 233.893462][T20811] should_failslab+0x5/0x20 [ 233.897974][T20811] kmem_cache_alloc_trace+0x52/0x320 [ 233.903306][T20811] call_usermodehelper_setup+0x71/0x190 [ 233.908840][T20811] ? add_uevent_var+0x1d0/0x1d0 [ 233.913699][T20811] kobject_uevent_env+0xb29/0xc40 [ 233.918816][T20811] disk_force_media_change+0xe3/0x170 [ 233.924173][T20811] loop_configure+0x6c0/0xeb0 [ 233.928838][T20811] lo_ioctl+0x618/0x13e0 [ 233.933070][T20811] ? path_openat+0x18d4/0x1ec0 [ 233.937820][T20811] ? blkdev_common_ioctl+0x438/0x1110 [ 233.943262][T20811] ? selinux_file_ioctl+0x981/0xa10 [ 233.948533][T20811] ? lo_release+0x120/0x120 [ 233.953065][T20811] blkdev_ioctl+0x1d0/0x3f0 [ 233.957551][T20811] block_ioctl+0x6e/0x80 [ 233.961780][T20811] ? blkdev_iopoll+0x80/0x80 [ 233.966349][T20811] __se_sys_ioctl+0xcb/0x140 [ 233.970939][T20811] __x64_sys_ioctl+0x3f/0x50 [ 233.975521][T20811] do_syscall_64+0x44/0xa0 [ 233.980021][T20811] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 233.985973][T20811] RIP: 0033:0x7fa5b3d02697 [ 233.990369][T20811] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 234.009992][T20811] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.018388][T20811] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 234.026341][T20811] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 234.034307][T20811] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 234.042306][T20811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 234.050292][T20811] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 234.058917][T20811] loop5: detected capacity change from 0 to 1054 [ 234.072644][T20811] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 234.093977][T20811] EXT4-fs (loop5): orphan cleanup on readonly fs 17:43:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c22, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:04 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x35, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x1260200, 0x0) close(r0) 17:43:04 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:04 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3d, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 32) [ 234.100387][T20811] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 234.114244][T20811] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 234.125111][T20811] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 234.139211][T20811] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 234.145910][T20811] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.218522][ C1] sd 0:0:1:0: tag#435 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 234.228399][ C1] sd 0:0:1:0: tag#435 CDB: opcode=0xe5 (vendor) [ 234.234675][ C1] sd 0:0:1:0: tag#435 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 234.243737][ C1] sd 0:0:1:0: tag#435 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 234.252699][ C1] sd 0:0:1:0: tag#435 CDB[20]: 80 19 [ 234.298757][T20843] loop3: detected capacity change from 0 to 1054 [ 234.307806][T20844] FAULT_INJECTION: forcing a failure. [ 234.307806][T20844] name failslab, interval 1, probability 0, space 0, times 0 [ 234.320448][T20844] CPU: 0 PID: 20844 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 234.329291][T20844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.339353][T20844] Call Trace: [ 234.342649][T20844] dump_stack_lvl+0xd6/0x122 [ 234.347236][T20844] dump_stack+0x11/0x1b [ 234.351386][T20844] should_fail+0x23c/0x250 [ 234.355884][T20844] ? __kernfs_new_node+0x6a/0x330 [ 234.360966][T20844] __should_failslab+0x81/0x90 [ 234.365822][T20844] should_failslab+0x5/0x20 [ 234.370322][T20844] kmem_cache_alloc+0x4f/0x300 [ 234.375078][T20844] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 234.380887][T20844] __kernfs_new_node+0x6a/0x330 [ 234.385730][T20844] ? ___cache_free+0x3c/0x300 [ 234.390521][T20844] ? kfree+0xf8/0x1d0 [ 234.394572][T20844] kernfs_create_dir_ns+0x5e/0x140 [ 234.399670][T20844] internal_create_group+0x148/0x860 [ 234.405047][T20844] ? __invalidate_device+0xb0/0xc0 [ 234.410141][T20844] ? set_disk_ro+0x73/0x110 [ 234.414656][T20844] sysfs_create_group+0x1b/0x20 [ 234.419620][T20844] loop_configure+0xbcd/0xeb0 [ 234.424317][T20844] lo_ioctl+0x618/0x13e0 [ 234.428652][T20844] ? path_openat+0x18d4/0x1ec0 [ 234.433418][T20844] ? blkdev_common_ioctl+0x438/0x1110 [ 234.438775][T20844] ? selinux_file_ioctl+0x981/0xa10 [ 234.444083][T20844] ? lo_release+0x120/0x120 [ 234.448579][T20844] blkdev_ioctl+0x1d0/0x3f0 [ 234.453076][T20844] block_ioctl+0x6e/0x80 [ 234.457305][T20844] ? blkdev_iopoll+0x80/0x80 [ 234.462318][T20844] __se_sys_ioctl+0xcb/0x140 [ 234.466992][T20844] __x64_sys_ioctl+0x3f/0x50 [ 234.471568][T20844] do_syscall_64+0x44/0xa0 [ 234.475993][T20844] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 234.481929][T20844] RIP: 0033:0x7fa5b3d02697 [ 234.486324][T20844] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 234.506130][T20844] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.514590][T20844] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 234.522542][T20844] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 234.530499][T20844] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 234.538556][T20844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 234.546505][T20844] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 234.554553][T20844] loop5: detected capacity change from 0 to 1054 [ 234.588954][T20843] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 234.622105][T20843] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 234.683701][T20843] EXT4-fs (loop3): get root inode failed [ 234.689425][T20843] EXT4-fs (loop3): mount failed [ 234.697938][T20844] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 234.735455][T20844] EXT4-fs (loop5): orphan cleanup on readonly fs [ 234.741828][T20844] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 234.755648][T20844] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 234.766510][T20844] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 33) [ 234.780623][T20844] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 234.787317][T20844] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.819559][T20843] loop3: detected capacity change from 0 to 1054 17:43:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x2000000, 0x0) close(r0) [ 234.828526][T20843] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:05 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 234.861538][ C0] sd 0:0:1:0: tag#407 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 234.871331][ C0] sd 0:0:1:0: tag#407 CDB: opcode=0xe5 (vendor) [ 234.878549][ C0] sd 0:0:1:0: tag#407 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 234.887501][ C0] sd 0:0:1:0: tag#407 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 234.896458][ C0] sd 0:0:1:0: tag#407 CDB[20]: 80 19 [ 234.923085][T20843] EXT4-fs: failed to create workqueue [ 234.928494][T20843] EXT4-fs (loop3): mount failed [ 234.959469][T20877] FAULT_INJECTION: forcing a failure. [ 234.959469][T20877] name failslab, interval 1, probability 0, space 0, times 0 17:43:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c25, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 234.972177][T20877] CPU: 0 PID: 20877 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 234.980934][T20877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.991030][T20877] Call Trace: [ 234.994303][T20877] dump_stack_lvl+0xd6/0x122 [ 234.998920][T20877] dump_stack+0x11/0x1b [ 235.003061][T20877] should_fail+0x23c/0x250 [ 235.007459][T20877] ? __kernfs_new_node+0x6a/0x330 [ 235.012476][T20877] __should_failslab+0x81/0x90 [ 235.017244][T20877] should_failslab+0x5/0x20 [ 235.021729][T20877] kmem_cache_alloc+0x4f/0x300 [ 235.026477][T20877] __kernfs_new_node+0x6a/0x330 [ 235.031405][T20877] ? __down_write_common+0x42/0x830 [ 235.036590][T20877] ? idr_alloc_cyclic+0x26b/0x2f0 [ 235.041823][T20877] ? __down_write_common+0x42/0x830 [ 235.047129][T20877] ? rb_insert_color+0x7e/0x310 [ 235.051978][T20877] kernfs_new_node+0x5b/0xd0 [ 235.056565][T20877] __kernfs_create_file+0x45/0x1a0 [ 235.061659][T20877] sysfs_add_file_mode_ns+0x1c1/0x250 [ 235.067012][T20877] internal_create_group+0x2f4/0x860 [ 235.072280][T20877] ? set_disk_ro+0x73/0x110 [ 235.076776][T20877] sysfs_create_group+0x1b/0x20 [ 235.081608][T20877] loop_configure+0xbcd/0xeb0 [ 235.086270][T20877] lo_ioctl+0x618/0x13e0 [ 235.090495][T20877] ? path_openat+0x18d4/0x1ec0 [ 235.095246][T20877] ? blkdev_common_ioctl+0x438/0x1110 [ 235.100654][T20877] ? selinux_file_ioctl+0x981/0xa10 [ 235.105845][T20877] ? lo_release+0x120/0x120 [ 235.110394][T20877] blkdev_ioctl+0x1d0/0x3f0 [ 235.114879][T20877] block_ioctl+0x6e/0x80 [ 235.119099][T20877] ? blkdev_iopoll+0x80/0x80 [ 235.123671][T20877] __se_sys_ioctl+0xcb/0x140 [ 235.128243][T20877] __x64_sys_ioctl+0x3f/0x50 [ 235.132813][T20877] do_syscall_64+0x44/0xa0 [ 235.137219][T20877] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 235.143183][T20877] RIP: 0033:0x7fa5b3d02697 [ 235.147580][T20877] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 235.167167][T20877] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.175557][T20877] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 235.183508][T20877] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 235.191462][T20877] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 235.199422][T20877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 235.207389][T20877] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 17:43:05 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x4, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x2040000, 0x0) close(r0) [ 235.297011][T20886] loop3: detected capacity change from 0 to 1054 [ 235.323633][T20886] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 235.345270][ C0] sd 0:0:1:0: tag#436 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 235.355040][ C0] sd 0:0:1:0: tag#436 CDB: opcode=0xe5 (vendor) [ 235.361311][ C0] sd 0:0:1:0: tag#436 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 235.363379][T20886] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 235.370263][ C0] sd 0:0:1:0: tag#436 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 235.370284][ C0] sd 0:0:1:0: tag#436 CDB[20]: 80 19 [ 235.401049][T20886] EXT4-fs (loop3): get root inode failed [ 235.407055][T20886] EXT4-fs (loop3): mount failed 17:43:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x2800300, 0x0) close(r0) [ 235.486293][T20877] loop5: detected capacity change from 0 to 1054 [ 235.514343][T20877] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 235.545339][T20877] EXT4-fs (loop5): orphan cleanup on readonly fs [ 235.551761][T20877] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 235.553516][T20886] loop3: detected capacity change from 0 to 1054 [ 235.565524][T20877] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 17:43:07 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x36, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:07 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x41, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 235.582751][T20877] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 235.596767][T20877] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 235.603439][T20877] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 235.606428][T20886] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 34) [ 235.658506][T20886] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 235.692480][T20886] EXT4-fs (loop3): get root inode failed [ 235.698144][T20886] EXT4-fs (loop3): mount failed 17:43:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c2e, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x3000000, 0x0) close(r0) [ 235.754231][T20927] FAULT_INJECTION: forcing a failure. [ 235.754231][T20927] name failslab, interval 1, probability 0, space 0, times 0 [ 235.766867][T20927] CPU: 0 PID: 20927 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 235.775650][T20927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.785737][T20927] Call Trace: [ 235.789018][T20927] dump_stack_lvl+0xd6/0x122 [ 235.793617][T20927] dump_stack+0x11/0x1b [ 235.797777][T20927] should_fail+0x23c/0x250 [ 235.802275][T20927] ? __kernfs_new_node+0x6a/0x330 [ 235.807392][T20927] __should_failslab+0x81/0x90 [ 235.812235][T20927] should_failslab+0x5/0x20 [ 235.816997][T20927] kmem_cache_alloc+0x4f/0x300 [ 235.821752][T20927] ? __down_write_common+0x42/0x830 [ 235.826982][T20927] __kernfs_new_node+0x6a/0x330 [ 235.831865][T20927] ? up_write+0x25/0xc0 [ 235.836020][T20927] kernfs_new_node+0x5b/0xd0 [ 235.840619][T20927] __kernfs_create_file+0x45/0x1a0 [ 235.845728][T20927] sysfs_add_file_mode_ns+0x1c1/0x250 [ 235.851096][T20927] internal_create_group+0x2f4/0x860 [ 235.856398][T20927] ? set_disk_ro+0x73/0x110 [ 235.861010][T20927] sysfs_create_group+0x1b/0x20 [ 235.866029][T20927] loop_configure+0xbcd/0xeb0 [ 235.870712][T20927] lo_ioctl+0x618/0x13e0 [ 235.874948][T20927] ? path_openat+0x18d4/0x1ec0 [ 235.879767][T20927] ? blkdev_common_ioctl+0x438/0x1110 [ 235.885185][T20927] ? selinux_file_ioctl+0x981/0xa10 [ 235.890733][T20927] ? lo_release+0x120/0x120 [ 235.895542][T20927] blkdev_ioctl+0x1d0/0x3f0 [ 235.900054][T20927] block_ioctl+0x6e/0x80 [ 235.904356][T20927] ? blkdev_iopoll+0x80/0x80 [ 235.908946][T20927] __se_sys_ioctl+0xcb/0x140 [ 235.913545][T20927] __x64_sys_ioctl+0x3f/0x50 [ 235.918216][T20927] do_syscall_64+0x44/0xa0 [ 235.922772][T20927] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 235.928675][T20927] RIP: 0033:0x7fa5b3d02697 [ 235.933078][T20927] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 235.952684][T20927] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.961181][T20927] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 235.969174][T20927] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 235.977144][T20927] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 235.985112][T20927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 235.993084][T20927] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 17:43:07 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x42, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 236.100426][T20939] loop3: detected capacity change from 0 to 1054 17:43:07 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x37, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 236.146195][T20939] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 236.185090][T20927] loop5: detected capacity change from 0 to 1054 [ 236.193613][T20939] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 236.193911][ C1] sd 0:0:1:0: tag#428 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 236.215392][ C1] sd 0:0:1:0: tag#428 CDB: opcode=0xe5 (vendor) [ 236.221643][ C1] sd 0:0:1:0: tag#428 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 236.230679][ C1] sd 0:0:1:0: tag#428 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 236.236171][T20939] EXT4-fs (loop3): get root inode failed 17:43:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x3820000, 0x0) close(r0) [ 236.239803][ C1] sd 0:0:1:0: tag#428 CDB[20]: 80 19 [ 236.245547][T20939] EXT4-fs (loop3): mount failed [ 236.273020][T20927] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 236.289494][T20927] EXT4-fs (loop5): orphan cleanup on readonly fs [ 236.295948][T20927] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 236.309798][T20927] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 236.320846][T20927] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 236.334845][T20927] EXT4-fs (loop5): Cannot turn on quotas: error -117 17:43:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x4000000, 0x0) close(r0) [ 236.341548][T20927] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:07 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x5, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:07 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x43, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:07 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x38, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 35) [ 236.390353][T20939] loop3: detected capacity change from 0 to 1054 [ 236.397881][T20939] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 236.436870][T20939] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 236.458331][T20939] EXT4-fs (loop3): get root inode failed [ 236.464113][T20939] EXT4-fs (loop3): mount failed [ 236.475795][T20981] FAULT_INJECTION: forcing a failure. [ 236.475795][T20981] name failslab, interval 1, probability 0, space 0, times 0 [ 236.488522][T20981] CPU: 1 PID: 20981 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 236.497284][T20981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.507363][T20981] Call Trace: [ 236.510645][T20981] dump_stack_lvl+0xd6/0x122 [ 236.515292][T20981] dump_stack+0x11/0x1b [ 236.519439][T20981] should_fail+0x23c/0x250 [ 236.523843][T20981] ? __kernfs_new_node+0x6a/0x330 [ 236.528909][T20981] __should_failslab+0x81/0x90 [ 236.533656][T20981] should_failslab+0x5/0x20 [ 236.538166][T20981] kmem_cache_alloc+0x4f/0x300 [ 236.542978][T20981] ? __down_write_common+0x42/0x830 [ 236.548171][T20981] __kernfs_new_node+0x6a/0x330 [ 236.553014][T20981] ? up_write+0x25/0xc0 [ 236.557152][T20981] kernfs_new_node+0x5b/0xd0 [ 236.561730][T20981] __kernfs_create_file+0x45/0x1a0 [ 236.566910][T20981] sysfs_add_file_mode_ns+0x1c1/0x250 [ 236.572262][T20981] internal_create_group+0x2f4/0x860 [ 236.577532][T20981] ? set_disk_ro+0x73/0x110 [ 236.582018][T20981] sysfs_create_group+0x1b/0x20 [ 236.586852][T20981] loop_configure+0xbcd/0xeb0 [ 236.591515][T20981] lo_ioctl+0x618/0x13e0 [ 236.595808][T20981] ? path_openat+0x18d4/0x1ec0 [ 236.600723][T20981] ? blkdev_common_ioctl+0x438/0x1110 [ 236.606076][T20981] ? selinux_file_ioctl+0x981/0xa10 [ 236.611256][T20981] ? lo_release+0x120/0x120 [ 236.615836][T20981] blkdev_ioctl+0x1d0/0x3f0 [ 236.620344][T20981] block_ioctl+0x6e/0x80 [ 236.624568][T20981] ? blkdev_iopoll+0x80/0x80 [ 236.629136][T20981] __se_sys_ioctl+0xcb/0x140 [ 236.633708][T20981] __x64_sys_ioctl+0x3f/0x50 [ 236.638349][T20981] do_syscall_64+0x44/0xa0 [ 236.642754][T20981] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 236.648637][T20981] RIP: 0033:0x7fa5b3d02697 [ 236.653090][T20981] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 236.672680][T20981] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.681091][T20981] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 236.689041][T20981] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 236.697149][T20981] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 236.705104][T20981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 236.713072][T20981] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 236.722552][ C0] sd 0:0:1:0: tag#437 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 236.732314][ C0] sd 0:0:1:0: tag#437 CDB: opcode=0xe5 (vendor) [ 236.738587][ C0] sd 0:0:1:0: tag#437 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 236.738861][T20981] loop5: detected capacity change from 0 to 1054 [ 236.747737][ C0] sd 0:0:1:0: tag#437 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 236.762984][ C0] sd 0:0:1:0: tag#437 CDB[20]: 80 19 [ 236.790220][T20981] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 236.846131][T20981] EXT4-fs (loop5): orphan cleanup on readonly fs [ 236.852559][T20981] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 236.866327][T20981] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 236.877198][T20981] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c48, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5000000, 0x0) close(r0) [ 236.891272][T20981] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 236.897971][T20981] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 36) [ 236.940128][ C0] sd 0:0:1:0: tag#424 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 236.949892][ C0] sd 0:0:1:0: tag#424 CDB: opcode=0xe5 (vendor) [ 236.956155][ C0] sd 0:0:1:0: tag#424 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 236.965179][ C0] sd 0:0:1:0: tag#424 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 236.974223][ C0] sd 0:0:1:0: tag#424 CDB[20]: 80 19 [ 237.063391][T21003] FAULT_INJECTION: forcing a failure. [ 237.063391][T21003] name failslab, interval 1, probability 0, space 0, times 0 [ 237.076158][T21003] CPU: 1 PID: 21003 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 237.085007][T21003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.095063][T21003] Call Trace: [ 237.098422][T21003] dump_stack_lvl+0xd6/0x122 [ 237.101619][T21010] loop3: detected capacity change from 0 to 1054 [ 237.103033][T21003] dump_stack+0x11/0x1b [ 237.113491][T21003] should_fail+0x23c/0x250 [ 237.117909][T21003] ? __kernfs_new_node+0x6a/0x330 [ 237.122944][T21003] __should_failslab+0x81/0x90 [ 237.127701][T21003] should_failslab+0x5/0x20 [ 237.132241][T21003] kmem_cache_alloc+0x4f/0x300 [ 237.137061][T21003] ? __down_write_common+0x42/0x830 [ 237.142243][T21003] __kernfs_new_node+0x6a/0x330 [ 237.147173][T21003] ? up_write+0x25/0xc0 [ 237.151391][T21003] kernfs_new_node+0x5b/0xd0 [ 237.156007][T21003] __kernfs_create_file+0x45/0x1a0 [ 237.161104][T21003] sysfs_add_file_mode_ns+0x1c1/0x250 [ 237.166470][T21003] internal_create_group+0x2f4/0x860 [ 237.171836][T21003] ? set_disk_ro+0x73/0x110 [ 237.176334][T21003] sysfs_create_group+0x1b/0x20 [ 237.181214][T21003] loop_configure+0xbcd/0xeb0 [ 237.185976][T21003] lo_ioctl+0x618/0x13e0 [ 237.190322][T21003] ? path_openat+0x18d4/0x1ec0 [ 237.195502][T21003] ? blkdev_common_ioctl+0x438/0x1110 [ 237.200857][T21003] ? selinux_file_ioctl+0x981/0xa10 [ 237.206073][T21003] ? lo_release+0x120/0x120 [ 237.210563][T21003] blkdev_ioctl+0x1d0/0x3f0 [ 237.215101][T21003] block_ioctl+0x6e/0x80 [ 237.219345][T21003] ? blkdev_iopoll+0x80/0x80 [ 237.223940][T21003] __se_sys_ioctl+0xcb/0x140 [ 237.228583][T21003] __x64_sys_ioctl+0x3f/0x50 [ 237.233194][T21003] do_syscall_64+0x44/0xa0 [ 237.237603][T21003] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 237.243488][T21003] RIP: 0033:0x7fa5b3d02697 [ 237.248062][T21003] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 237.267685][T21003] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.276118][T21003] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 237.284249][T21003] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 237.292410][T21003] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 237.300370][T21003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 17:43:08 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x6, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x6000000, 0x0) close(r0) 17:43:08 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x44, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 237.308323][T21003] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 237.333725][T21010] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 237.344035][T21010] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 237.367519][T21003] loop5: detected capacity change from 0 to 1054 [ 237.373955][T21010] EXT4-fs (loop3): get root inode failed [ 237.376433][ C0] sd 0:0:1:0: tag#400 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 237.379611][T21010] EXT4-fs (loop3): mount failed [ 237.394204][ C0] sd 0:0:1:0: tag#400 CDB: opcode=0xe5 (vendor) [ 237.400490][ C0] sd 0:0:1:0: tag#400 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 17:43:08 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x39, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 237.409465][ C0] sd 0:0:1:0: tag#400 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 237.418494][ C0] sd 0:0:1:0: tag#400 CDB[20]: 80 19 [ 237.421972][T21003] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 237.443570][ C0] sd 0:0:1:0: tag#401 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 237.453329][ C0] sd 0:0:1:0: tag#401 CDB: opcode=0xe5 (vendor) [ 237.459565][ C0] sd 0:0:1:0: tag#401 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 237.470875][ C0] sd 0:0:1:0: tag#401 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 237.479882][ C0] sd 0:0:1:0: tag#401 CDB[20]: 80 19 [ 237.533506][T21003] EXT4-fs (loop5): orphan cleanup on readonly fs [ 237.539980][T21003] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 237.553735][T21003] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 237.564647][T21003] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x6040000, 0x0) close(r0) 17:43:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x45, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 237.578717][T21003] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 237.585496][T21003] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 237.619788][T21010] loop3: detected capacity change from 0 to 1054 17:43:09 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 237.667206][T21010] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 237.697901][T21010] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:43:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 37) 17:43:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x6600400, 0x0) close(r0) [ 237.748065][T21010] EXT4-fs (loop3): get root inode failed [ 237.753752][T21010] EXT4-fs (loop3): mount failed 17:43:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c4c, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 237.887308][T21063] FAULT_INJECTION: forcing a failure. [ 237.887308][T21063] name failslab, interval 1, probability 0, space 0, times 0 [ 237.900020][T21063] CPU: 1 PID: 21063 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 237.908801][T21063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.908815][T21063] Call Trace: [ 237.908823][T21063] dump_stack_lvl+0xd6/0x122 [ 237.908849][T21063] dump_stack+0x11/0x1b [ 237.908940][T21063] should_fail+0x23c/0x250 17:43:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x46, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 237.908957][T21063] ? __kernfs_new_node+0x6a/0x330 [ 237.909030][T21063] __should_failslab+0x81/0x90 [ 237.909056][T21063] should_failslab+0x5/0x20 [ 237.909078][T21063] kmem_cache_alloc+0x4f/0x300 [ 237.909095][T21063] ? __down_write_common+0x42/0x830 [ 237.909184][T21063] __kernfs_new_node+0x6a/0x330 [ 237.909234][T21063] ? up_write+0x25/0xc0 [ 237.969200][T21063] kernfs_new_node+0x5b/0xd0 [ 237.974322][T21063] __kernfs_create_file+0x45/0x1a0 [ 237.979439][T21063] sysfs_add_file_mode_ns+0x1c1/0x250 17:43:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x7000000, 0x0) close(r0) [ 237.984807][T21063] internal_create_group+0x2f4/0x860 [ 237.990344][T21063] ? set_disk_ro+0x73/0x110 [ 237.994844][T21063] sysfs_create_group+0x1b/0x20 [ 237.999697][T21063] loop_configure+0xbcd/0xeb0 [ 238.004378][T21063] lo_ioctl+0x618/0x13e0 [ 238.008622][T21063] ? path_openat+0x18d4/0x1ec0 [ 238.013430][T21063] ? blkdev_common_ioctl+0x438/0x1110 [ 238.018885][T21063] ? selinux_file_ioctl+0x981/0xa10 [ 238.024269][T21063] ? lo_release+0x120/0x120 [ 238.028769][T21063] blkdev_ioctl+0x1d0/0x3f0 [ 238.033269][T21063] block_ioctl+0x6e/0x80 [ 238.037592][T21063] ? blkdev_iopoll+0x80/0x80 [ 238.042174][T21063] __se_sys_ioctl+0xcb/0x140 [ 238.046760][T21063] __x64_sys_ioctl+0x3f/0x50 [ 238.051353][T21063] do_syscall_64+0x44/0xa0 [ 238.055771][T21063] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 238.061741][T21063] RIP: 0033:0x7fa5b3d02697 [ 238.066144][T21063] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 238.085748][T21063] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.094232][T21063] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 238.102197][T21063] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 238.110189][T21063] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 238.118147][T21063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 238.126110][T21063] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 238.137368][T21063] loop5: detected capacity change from 0 to 1054 [ 238.170860][T21063] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 238.175612][T21081] loop3: detected capacity change from 0 to 1054 17:43:09 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:09 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x8, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 238.194821][T21063] EXT4-fs (loop5): orphan cleanup on readonly fs [ 238.201454][T21063] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 238.215354][T21063] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 238.226377][T21063] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 238.240395][T21063] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 238.247157][T21063] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 38) [ 238.318672][T21081] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x8000000, 0x0) close(r0) [ 238.376753][T21081] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 238.389194][T21099] FAULT_INJECTION: forcing a failure. [ 238.389194][T21099] name failslab, interval 1, probability 0, space 0, times 0 17:43:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 39) 17:43:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x47, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 238.389217][T21099] CPU: 1 PID: 21099 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 238.389237][T21099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.389286][T21099] Call Trace: [ 238.389293][T21099] dump_stack_lvl+0xd6/0x122 [ 238.389364][T21099] dump_stack+0x11/0x1b [ 238.389382][T21099] should_fail+0x23c/0x250 [ 238.389400][T21099] ? __kernfs_new_node+0x6a/0x330 [ 238.389430][T21099] __should_failslab+0x81/0x90 [ 238.389450][T21099] should_failslab+0x5/0x20 [ 238.389472][T21099] kmem_cache_alloc+0x4f/0x300 [ 238.389491][T21099] ? __down_write_common+0x42/0x830 [ 238.389582][T21099] __kernfs_new_node+0x6a/0x330 17:43:10 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 238.389602][T21099] ? up_write+0x25/0xc0 [ 238.389675][T21099] kernfs_new_node+0x5b/0xd0 [ 238.389751][T21099] __kernfs_create_file+0x45/0x1a0 [ 238.389769][T21099] sysfs_add_file_mode_ns+0x1c1/0x250 [ 238.389789][T21099] internal_create_group+0x2f4/0x860 [ 238.389867][T21099] ? set_disk_ro+0x73/0x110 [ 238.389886][T21099] sysfs_create_group+0x1b/0x20 [ 238.389905][T21099] loop_configure+0xbcd/0xeb0 [ 238.389928][T21099] lo_ioctl+0x618/0x13e0 [ 238.389948][T21099] ? path_openat+0x18d4/0x1ec0 [ 238.389993][T21099] ? blkdev_common_ioctl+0x438/0x1110 17:43:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x8040000, 0x0) close(r0) [ 238.390012][T21099] ? selinux_file_ioctl+0x981/0xa10 [ 238.390040][T21099] ? lo_release+0x120/0x120 [ 238.390057][T21099] blkdev_ioctl+0x1d0/0x3f0 [ 238.390146][T21099] block_ioctl+0x6e/0x80 [ 238.390163][T21099] ? blkdev_iopoll+0x80/0x80 [ 238.390179][T21099] __se_sys_ioctl+0xcb/0x140 [ 238.390195][T21099] __x64_sys_ioctl+0x3f/0x50 [ 238.390259][T21099] do_syscall_64+0x44/0xa0 [ 238.390284][T21099] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 238.390308][T21099] RIP: 0033:0x7fa5b3d02697 [ 238.390321][T21099] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 238.390336][T21099] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.390354][T21099] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 238.390367][T21099] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 238.390380][T21099] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 238.390442][T21099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 238.390453][T21099] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 238.390529][T21099] loop5: detected capacity change from 0 to 1054 [ 238.392054][T21099] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 238.424816][T21099] EXT4-fs (loop5): orphan cleanup on readonly fs [ 238.424830][T21099] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 238.424855][T21099] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 238.424875][T21099] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 238.424911][T21099] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 238.424925][T21099] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.425385][T21081] EXT4-fs (loop3): get root inode failed [ 238.425396][T21081] EXT4-fs (loop3): mount failed [ 238.480076][T21081] loop3: detected capacity change from 0 to 1054 [ 238.480596][T21081] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 238.492227][T21081] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 238.492345][T21081] EXT4-fs (loop3): get root inode failed [ 238.492356][T21081] EXT4-fs (loop3): mount failed [ 238.506025][T21119] loop5: detected capacity change from 0 to 1054 [ 238.854310][T21119] FAULT_INJECTION: forcing a failure. [ 238.854310][T21119] name failslab, interval 1, probability 0, space 0, times 0 [ 238.866975][T21119] CPU: 0 PID: 21119 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 238.875767][T21119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.885816][T21119] Call Trace: [ 238.889087][T21119] dump_stack_lvl+0xd6/0x122 [ 238.893679][T21119] dump_stack+0x11/0x1b [ 238.897835][T21119] should_fail+0x23c/0x250 [ 238.902246][T21119] __should_failslab+0x81/0x90 [ 238.907014][T21119] ? kobject_uevent_env+0x1a7/0xc40 [ 238.912214][T21119] should_failslab+0x5/0x20 [ 238.916721][T21119] kmem_cache_alloc_trace+0x52/0x320 [ 238.922003][T21119] ? dev_uevent_filter+0x70/0x70 [ 238.927012][T21119] kobject_uevent_env+0x1a7/0xc40 [ 238.932041][T21119] ? internal_create_group+0x7d9/0x860 [ 238.937491][T21119] ? set_capacity_and_notify+0x1eb/0x200 [ 238.943120][T21119] kobject_uevent+0x18/0x20 [ 238.947672][T21119] loop_configure+0xce1/0xeb0 [ 238.952345][T21119] lo_ioctl+0x618/0x13e0 [ 238.956596][T21119] ? path_openat+0x18d4/0x1ec0 [ 238.961366][T21119] ? blkdev_common_ioctl+0x438/0x1110 [ 238.966731][T21119] ? selinux_file_ioctl+0x981/0xa10 [ 238.971920][T21119] ? lo_release+0x120/0x120 [ 238.976415][T21119] blkdev_ioctl+0x1d0/0x3f0 [ 238.980969][T21119] block_ioctl+0x6e/0x80 [ 238.985198][T21119] ? blkdev_iopoll+0x80/0x80 [ 238.989778][T21119] __se_sys_ioctl+0xcb/0x140 [ 238.994434][T21119] __x64_sys_ioctl+0x3f/0x50 [ 238.999013][T21119] do_syscall_64+0x44/0xa0 [ 239.003415][T21119] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 239.009305][T21119] RIP: 0033:0x7fa5b3d02697 [ 239.013711][T21119] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 239.033396][T21119] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.041800][T21119] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 17:43:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x8380200, 0x0) close(r0) [ 239.049751][T21119] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 239.057722][T21119] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 239.065758][T21119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 239.073823][T21119] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 17:43:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c60, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:10 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x9, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x48, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:10 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 239.114877][T21119] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 239.151450][T21119] EXT4-fs (loop5): orphan cleanup on readonly fs [ 239.160051][T21119] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 239.173803][T21119] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 239.184666][T21119] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 239.195261][T21147] loop3: detected capacity change from 0 to 1054 [ 239.198663][T21119] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 239.211649][T21119] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.244680][ C0] scsi_io_completion_action: 4 callbacks suppressed [ 239.244707][ C0] sd 0:0:1:0: tag#400 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 17:43:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) (fail_nth: 40) [ 239.261353][ C0] sd 0:0:1:0: tag#400 CDB: opcode=0xe5 (vendor) [ 239.267644][ C0] sd 0:0:1:0: tag#400 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 239.276591][ C0] sd 0:0:1:0: tag#400 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 239.285561][ C0] sd 0:0:1:0: tag#400 CDB[20]: 80 19 [ 239.328602][T21147] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 239.350701][ C1] sd 0:0:1:0: tag#429 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 239.352218][T21147] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 239.360464][ C1] sd 0:0:1:0: tag#429 CDB: opcode=0xe5 (vendor) [ 239.378690][ C1] sd 0:0:1:0: tag#429 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 239.387640][ C1] sd 0:0:1:0: tag#429 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 239.396599][ C1] sd 0:0:1:0: tag#429 CDB[20]: 80 19 17:43:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x8600400, 0x0) close(r0) [ 239.523282][T21147] EXT4-fs (loop3): get root inode failed [ 239.528956][T21147] EXT4-fs (loop3): mount failed [ 239.542008][T21166] loop5: detected capacity change from 0 to 1054 [ 239.549499][T21166] FAULT_INJECTION: forcing a failure. [ 239.549499][T21166] name failslab, interval 1, probability 0, space 0, times 0 [ 239.562137][T21166] CPU: 0 PID: 21166 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 239.570948][T21166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.580999][T21166] Call Trace: [ 239.584275][T21166] dump_stack_lvl+0xd6/0x122 [ 239.588956][T21166] dump_stack+0x11/0x1b [ 239.593232][T21166] should_fail+0x23c/0x250 [ 239.597707][T21166] ? kzalloc+0x1d/0x30 [ 239.602127][T21166] __should_failslab+0x81/0x90 [ 239.606893][T21166] should_failslab+0x5/0x20 [ 239.611391][T21166] __kmalloc+0x6f/0x350 [ 239.615540][T21166] kzalloc+0x1d/0x30 [ 239.619434][T21166] kobject_get_path+0x7c/0x110 [ 239.624195][T21166] kobject_uevent_env+0x1be/0xc40 [ 239.629220][T21166] ? internal_create_group+0x7d9/0x860 [ 239.634692][T21166] ? set_capacity_and_notify+0x1eb/0x200 [ 239.640375][T21166] kobject_uevent+0x18/0x20 [ 239.644885][T21166] loop_configure+0xce1/0xeb0 [ 239.649624][T21166] lo_ioctl+0x618/0x13e0 [ 239.653927][T21166] ? path_openat+0x18d4/0x1ec0 [ 239.658690][T21166] ? blkdev_common_ioctl+0x438/0x1110 [ 239.664058][T21166] ? selinux_file_ioctl+0x981/0xa10 [ 239.669262][T21166] ? lo_release+0x120/0x120 [ 239.673761][T21166] blkdev_ioctl+0x1d0/0x3f0 [ 239.678261][T21166] block_ioctl+0x6e/0x80 [ 239.682595][T21166] ? blkdev_iopoll+0x80/0x80 [ 239.687267][T21166] __se_sys_ioctl+0xcb/0x140 [ 239.691930][T21166] __x64_sys_ioctl+0x3f/0x50 [ 239.696524][T21166] do_syscall_64+0x44/0xa0 [ 239.700932][T21166] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 239.706878][T21166] RIP: 0033:0x7fa5b3d02697 [ 239.711290][T21166] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 94 53 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 239.730897][T21166] RSP: 002b:00007fa5b1a79f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.739356][T21166] RAX: ffffffffffffffda RBX: 00007fa5b3d4ccc0 RCX: 00007fa5b3d02697 [ 239.747426][T21166] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 239.755393][T21166] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 239.763362][T21166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 17:43:11 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xa, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 239.771335][T21166] R13: 0000000000000004 R14: 00000000200005b8 R15: 0000000000000005 [ 239.794360][T21147] loop3: detected capacity change from 0 to 1054 [ 239.819177][T21147] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 239.836177][ C0] sd 0:0:1:0: tag#400 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 239.839418][T21166] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 239.845934][ C0] sd 0:0:1:0: tag#400 CDB: opcode=0xe5 (vendor) [ 239.861821][ C0] sd 0:0:1:0: tag#400 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 17:43:11 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3d, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 239.871245][ C0] sd 0:0:1:0: tag#400 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 239.880224][ C0] sd 0:0:1:0: tag#400 CDB[20]: 80 19 [ 239.893885][T21147] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 239.906383][T21147] EXT4-fs (loop3): get root inode failed [ 239.912025][T21147] EXT4-fs (loop3): mount failed [ 239.915626][T21166] EXT4-fs (loop5): orphan cleanup on readonly fs 17:43:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x8800000, 0x0) close(r0) [ 239.923211][T21166] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 239.936950][T21166] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 239.947838][T21166] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 239.961823][T21166] EXT4-fs (loop5): Cannot turn on quotas: error -117 17:43:11 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x49, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 239.968522][T21166] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c68, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 240.143415][T21209] loop3: detected capacity change from 0 to 1054 [ 240.158589][T21209] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 240.193833][T21209] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 240.237666][T21209] EXT4-fs (loop3): get root inode failed [ 240.243349][T21209] EXT4-fs (loop3): mount failed 17:43:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x8ea0100, 0x0) close(r0) [ 240.287718][T21209] loop3: detected capacity change from 0 to 1054 [ 240.299735][T21209] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 240.309255][T21218] loop5: detected capacity change from 0 to 1054 [ 240.369973][T21209] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 240.369986][T21218] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 240.400402][T21218] EXT4-fs (loop5): orphan cleanup on readonly fs [ 240.406748][T21218] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 240.420568][T21218] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 240.431554][T21218] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 240.443082][T21209] EXT4-fs (loop3): get root inode failed [ 240.445754][T21218] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 240.451411][T21209] EXT4-fs (loop3): mount failed [ 240.458057][T21218] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80900, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 240.512263][ C0] sd 0:0:1:0: tag#401 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 240.522056][ C0] sd 0:0:1:0: tag#401 CDB: opcode=0xe5 (vendor) [ 240.528313][ C0] sd 0:0:1:0: tag#401 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 240.537342][ C0] sd 0:0:1:0: tag#401 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 240.546333][ C0] sd 0:0:1:0: tag#401 CDB[20]: 80 19 17:43:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c6c, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:12 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xb, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 240.623685][T21246] loop5: detected capacity change from 0 to 1028 [ 240.639499][T21246] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 240.684588][T21246] EXT4-fs (loop5): orphan cleanup on readonly fs [ 240.691042][T21246] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 240.704805][T21246] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 240.715851][T21246] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:12 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x9000000, 0x0) close(r0) [ 240.729853][T21246] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 240.736549][T21246] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.774671][T21261] loop3: detected capacity change from 0 to 1054 [ 240.787161][ C1] sd 0:0:1:0: tag#393 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 240.796938][ C1] sd 0:0:1:0: tag#393 CDB: opcode=0xe5 (vendor) [ 240.803218][ C1] sd 0:0:1:0: tag#393 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 240.812167][ C1] sd 0:0:1:0: tag#393 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 240.821126][ C1] sd 0:0:1:0: tag#393 CDB[20]: 80 19 17:43:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c02, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:12 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 240.917826][T21261] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 240.967771][T21261] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 240.989583][T21283] loop5: detected capacity change from 0 to 1054 [ 241.006492][ C0] sd 0:0:1:0: tag#428 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 17:43:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xa000000, 0x0) close(r0) [ 241.016257][ C0] sd 0:0:1:0: tag#428 CDB: opcode=0xe5 (vendor) [ 241.022630][ C0] sd 0:0:1:0: tag#428 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 241.022653][ C0] sd 0:0:1:0: tag#428 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 17:43:12 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 241.022670][ C0] sd 0:0:1:0: tag#428 CDB[20]: 80 19 [ 241.067565][T21283] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 241.081777][T21261] EXT4-fs (loop3): get root inode failed [ 241.087428][T21261] EXT4-fs (loop3): mount failed [ 241.143985][T21283] EXT4-fs (loop5): orphan cleanup on readonly fs [ 241.150388][T21283] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 241.164127][T21283] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 241.175076][T21283] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:12 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 241.189177][T21283] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 241.195965][T21283] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.217134][T21261] loop3: detected capacity change from 0 to 1054 17:43:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xa400200, 0x0) close(r0) 17:43:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c03, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 241.244912][T21261] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 241.303205][ C1] sd 0:0:1:0: tag#435 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 241.312990][ C1] sd 0:0:1:0: tag#435 CDB: opcode=0xe5 (vendor) [ 241.319285][ C1] sd 0:0:1:0: tag#435 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 241.321369][T21261] EXT4-fs: failed to create workqueue [ 241.328241][ C1] sd 0:0:1:0: tag#435 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 241.333601][T21261] EXT4-fs (loop3): mount failed [ 241.342776][ C1] sd 0:0:1:0: tag#435 CDB[20]: 80 19 [ 241.513046][T21326] loop5: detected capacity change from 0 to 1054 [ 241.515877][ C0] sd 0:0:1:0: tag#410 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 241.529223][ C0] sd 0:0:1:0: tag#410 CDB: opcode=0xe5 (vendor) [ 241.531982][T21326] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 241.535485][ C0] sd 0:0:1:0: tag#410 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 241.553940][ C0] sd 0:0:1:0: tag#410 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 241.563000][ C0] sd 0:0:1:0: tag#410 CDB[20]: 80 19 [ 241.600878][T21326] EXT4-fs (loop5): orphan cleanup on readonly fs [ 241.607309][T21326] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 241.621136][T21326] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 241.632002][T21326] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c74, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 241.646010][T21326] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 241.652685][T21326] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:13 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xb000000, 0x0) close(r0) 17:43:13 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xd, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 241.757165][T21339] loop3: detected capacity change from 0 to 1054 [ 241.794869][T21339] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 241.854922][T21339] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 241.871140][ C1] sd 0:0:1:0: tag#395 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 241.881276][ C1] sd 0:0:1:0: tag#395 CDB: opcode=0xe5 (vendor) [ 241.887535][ C1] sd 0:0:1:0: tag#395 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 241.896484][ C1] sd 0:0:1:0: tag#395 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 241.905583][ C1] sd 0:0:1:0: tag#395 CDB[20]: 80 19 [ 241.905842][T21339] EXT4-fs (loop3): get root inode failed [ 241.916610][T21339] EXT4-fs (loop3): mount failed 17:43:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c04, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 242.019031][T21339] loop3: detected capacity change from 0 to 1054 [ 242.030735][T21339] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 242.055324][T21339] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:43:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xc000000, 0x0) close(r0) [ 242.068391][T21372] loop5: detected capacity change from 0 to 1054 [ 242.083235][T21372] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 242.084783][T21339] EXT4-fs (loop3): get root inode failed [ 242.098193][T21339] EXT4-fs (loop3): mount failed [ 242.099751][ C1] sd 0:0:1:0: tag#398 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 242.112853][ C1] sd 0:0:1:0: tag#398 CDB: opcode=0xe5 (vendor) [ 242.119103][ C1] sd 0:0:1:0: tag#398 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 242.127241][T21372] EXT4-fs (loop5): orphan cleanup on readonly fs [ 242.128062][ C1] sd 0:0:1:0: tag#398 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 242.134382][T21372] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 242.143304][ C1] sd 0:0:1:0: tag#398 CDB[20]: 80 19 [ 242.156999][T21372] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 242.173408][T21372] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 242.187659][T21372] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 242.194356][T21372] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.104185][T21398] cgroup: Unknown subsys name 'perf_event' [ 243.110175][T21398] cgroup: Unknown subsys name 'net_cls' 17:43:15 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x41, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c7a, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:15 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xe, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c05, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xc180200, 0x0) close(r0) 17:43:15 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4d, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 244.534071][T21858] loop5: detected capacity change from 0 to 1054 [ 244.547533][T21864] loop3: detected capacity change from 0 to 1054 [ 244.555787][ C1] sd 0:0:1:0: tag#387 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 244.565573][ C1] sd 0:0:1:0: tag#387 CDB: opcode=0xe5 (vendor) [ 244.571828][ C1] sd 0:0:1:0: tag#387 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 244.580795][ C1] sd 0:0:1:0: tag#387 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 244.588392][T21864] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 244.589970][ C1] sd 0:0:1:0: tag#387 CDB[20]: 80 19 [ 244.613617][T21858] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 244.648057][T21858] EXT4-fs (loop5): orphan cleanup on readonly fs [ 244.654410][T21858] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 244.668261][T21858] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 244.679143][T21858] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 244.693147][T21858] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 244.699841][T21858] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c06, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 244.745146][T21864] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 244.766757][T21864] EXT4-fs (loop3): get root inode failed [ 244.772626][T21864] EXT4-fs (loop3): mount failed [ 244.821976][T21864] loop3: detected capacity change from 0 to 1054 [ 244.834314][T21864] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xd000000, 0x0) close(r0) [ 244.864322][T21894] loop5: detected capacity change from 0 to 1054 [ 244.887175][T21894] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 244.898139][T21864] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 244.930831][T21894] EXT4-fs (loop5): orphan cleanup on readonly fs [ 244.937293][T21894] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 244.951046][T21894] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 244.961959][T21894] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 244.975968][T21894] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 244.980104][T21864] EXT4-fs (loop3): get root inode failed [ 244.982648][T21894] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 244.991317][ C1] sd 0:0:1:0: tag#405 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 244.999355][T21864] EXT4-fs (loop3): mount failed [ 245.009076][ C1] sd 0:0:1:0: tag#405 CDB: opcode=0xe5 (vendor) [ 245.020141][ C1] sd 0:0:1:0: tag#405 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 17:43:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c07, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:16 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x42, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:16 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xe000000, 0x0) close(r0) [ 245.029103][ C1] sd 0:0:1:0: tag#405 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 245.038069][ C1] sd 0:0:1:0: tag#405 CDB[20]: 80 19 17:43:16 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xf, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c83, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 245.159180][T21926] loop5: detected capacity change from 0 to 1054 [ 245.179067][T21926] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 245.213120][T21938] loop3: detected capacity change from 0 to 1054 [ 245.222047][T21926] EXT4-fs (loop5): orphan cleanup on readonly fs [ 245.228387][T21926] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 245.242161][T21926] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 245.253148][T21926] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 245.267155][T21926] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 245.273858][T21926] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.286613][ C0] sd 0:0:1:0: tag#439 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 245.296413][ C0] sd 0:0:1:0: tag#439 CDB: opcode=0xe5 (vendor) [ 245.301043][T21938] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 245.302759][ C0] sd 0:0:1:0: tag#439 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 245.302780][ C0] sd 0:0:1:0: tag#439 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 245.329843][ C0] sd 0:0:1:0: tag#439 CDB[20]: 80 19 17:43:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c08, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 245.376268][T21938] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:43:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xf000000, 0x0) close(r0) [ 245.435211][ C1] sd 0:0:1:0: tag#416 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 245.445077][ C1] sd 0:0:1:0: tag#416 CDB: opcode=0xe5 (vendor) [ 245.451439][ C1] sd 0:0:1:0: tag#416 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 245.460412][ C1] sd 0:0:1:0: tag#416 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 245.469365][ C1] sd 0:0:1:0: tag#416 CDB[20]: 80 19 17:43:16 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x43, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:16 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x10, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 245.611383][T21938] EXT4-fs (loop3): get root inode failed [ 245.617099][T21938] EXT4-fs (loop3): mount failed 17:43:16 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4f, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 245.708523][T21938] loop3: detected capacity change from 0 to 1054 [ 245.739781][T21938] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xf480200, 0x0) close(r0) [ 245.772937][ C1] sd 0:0:1:0: tag#401 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 245.782726][ C1] sd 0:0:1:0: tag#401 CDB: opcode=0xe5 (vendor) [ 245.789253][ C1] sd 0:0:1:0: tag#401 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 245.791387][T21938] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 245.798199][ C1] sd 0:0:1:0: tag#401 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 245.819202][ C1] sd 0:0:1:0: tag#401 CDB[20]: 80 19 17:43:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x10000000, 0x0) close(r0) [ 246.028288][T21938] EXT4-fs (loop3): get root inode failed [ 246.033954][T21938] EXT4-fs (loop3): mount failed [ 246.060025][ C1] sd 0:0:1:0: tag#438 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 246.069960][ C1] sd 0:0:1:0: tag#438 CDB: opcode=0xe5 (vendor) 17:43:17 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x44, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83cfe, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 246.076215][ C1] sd 0:0:1:0: tag#438 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 246.076238][ C1] sd 0:0:1:0: tag#438 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 17:43:17 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x50, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 246.076253][ C1] sd 0:0:1:0: tag#438 CDB[20]: 80 19 17:43:17 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x11, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 246.192310][T21998] loop3: detected capacity change from 0 to 1054 [ 246.234066][T21998] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 246.260113][ C0] sd 0:0:1:0: tag#434 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 246.269888][ C0] sd 0:0:1:0: tag#434 CDB: opcode=0xe5 (vendor) 17:43:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x11000000, 0x0) close(r0) [ 246.276143][ C0] sd 0:0:1:0: tag#434 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 246.285099][ C0] sd 0:0:1:0: tag#434 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 246.294046][ C0] sd 0:0:1:0: tag#434 CDB[20]: 80 19 [ 246.310524][T21998] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 246.323011][T21998] EXT4-fs (loop3): get root inode failed [ 246.328716][T21998] EXT4-fs (loop3): mount failed [ 246.384193][ C0] sd 0:0:1:0: tag#436 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 246.393963][ C0] sd 0:0:1:0: tag#436 CDB: opcode=0xe5 (vendor) [ 246.400235][ C0] sd 0:0:1:0: tag#436 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 246.409200][ C0] sd 0:0:1:0: tag#436 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 246.418161][ C0] sd 0:0:1:0: tag#436 CDB[20]: 80 19 [ 246.439665][T21998] loop3: detected capacity change from 0 to 1054 [ 246.451431][T21998] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 246.463363][T21998] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 246.476082][T21998] EXT4-fs (loop3): get root inode failed [ 246.481884][T21998] EXT4-fs (loop3): mount failed [ 247.189960][T22033] cgroup: Unknown subsys name 'perf_event' [ 247.196047][T22033] cgroup: Unknown subsys name 'net_cls' [ 248.301607][T22488] loop5: detected capacity change from 0 to 1054 [ 248.312012][T22488] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 248.322005][T22488] EXT4-fs (loop5): orphan cleanup on readonly fs [ 248.328398][T22488] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # 17:43:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c09, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:19 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x12, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x84000, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x12000000, 0x0) close(r0) 17:43:19 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x45, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:19 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x51, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 248.342131][T22488] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 248.352996][T22488] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 248.367035][T22488] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 248.373700][T22488] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.443413][T22504] loop3: detected capacity change from 0 to 1056 [ 248.459648][T22503] loop5: detected capacity change from 0 to 1054 [ 248.459933][ C0] sd 0:0:1:0: tag#421 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 248.475761][ C0] sd 0:0:1:0: tag#421 CDB: opcode=0xe5 (vendor) [ 248.482036][ C0] sd 0:0:1:0: tag#421 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 248.486278][T22503] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 248.490988][ C0] sd 0:0:1:0: tag#421 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 248.509105][ C0] sd 0:0:1:0: tag#421 CDB[20]: 80 19 [ 248.527774][T22504] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 248.544957][T22503] EXT4-fs (loop5): orphan cleanup on readonly fs [ 248.551444][T22503] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 248.565784][T22503] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 248.576737][T22503] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 248.590804][T22503] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 248.597482][T22503] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.622564][T22504] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:43:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x12280200, 0x0) close(r0) 17:43:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0a, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 248.673376][ C0] sd 0:0:1:0: tag#444 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 248.683221][ C0] sd 0:0:1:0: tag#444 CDB: opcode=0xe5 (vendor) [ 248.689495][ C0] sd 0:0:1:0: tag#444 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 248.698456][ C0] sd 0:0:1:0: tag#444 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 248.707417][ C0] sd 0:0:1:0: tag#444 CDB[20]: 80 19 [ 248.713019][T22504] EXT4-fs (loop3): get root inode failed [ 248.718695][T22504] EXT4-fs (loop3): mount failed 17:43:20 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x13, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 248.826976][T22504] loop3: detected capacity change from 0 to 1056 [ 248.829898][T22539] loop5: detected capacity change from 0 to 1054 [ 248.858709][T22504] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 248.880167][T22539] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 248.901056][T22504] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 248.914071][T22539] EXT4-fs (loop5): orphan cleanup on readonly fs [ 248.920631][T22539] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 248.934401][T22539] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 248.945306][T22539] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 248.959317][T22539] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 248.966026][T22539] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x13200200, 0x0) close(r0) 17:43:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0b, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 248.990875][T22504] EXT4-fs (loop3): get root inode failed [ 248.996547][T22504] EXT4-fs (loop3): mount failed 17:43:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8feff, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:20 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x46, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:20 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x52, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 249.106930][T22563] loop5: detected capacity change from 0 to 1054 [ 249.141845][T22575] loop3: detected capacity change from 0 to 1151 17:43:20 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x14, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 249.169871][T22563] loop5: detected capacity change from 0 to 1054 [ 249.180933][T22575] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 249.195615][T22563] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 249.235624][T22563] EXT4-fs (loop5): orphan cleanup on readonly fs [ 249.242123][T22563] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 249.255931][T22563] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 249.266811][T22563] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0c, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x15000000, 0x0) close(r0) [ 249.280836][T22563] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 249.287542][T22563] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 249.304527][T22575] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 249.335294][T22575] EXT4-fs (loop3): get root inode failed [ 249.341020][T22575] EXT4-fs (loop3): mount failed 17:43:20 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x53, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:20 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x47, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 249.405865][T22575] loop3: detected capacity change from 0 to 1151 [ 249.418045][T22575] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 249.470209][T22575] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 249.482787][T22621] loop5: detected capacity change from 0 to 1054 17:43:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x16340200, 0x0) close(r0) [ 249.513745][T22621] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 249.523509][T22575] EXT4-fs (loop3): get root inode failed [ 249.529157][T22575] EXT4-fs (loop3): mount failed [ 249.576719][T22621] EXT4-fs (loop5): orphan cleanup on readonly fs [ 249.583219][T22621] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 249.599248][T22621] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 249.610209][T22621] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x2, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 249.624369][T22621] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 249.631087][T22621] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 249.698436][T22643] loop3: detected capacity change from 0 to 1054 [ 249.717515][T22643] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:20 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x54, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 249.747272][T22643] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 249.764079][T22643] EXT4-fs (loop3): get root inode failed [ 249.769784][T22643] EXT4-fs (loop3): mount failed 17:43:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x17000000, 0x0) close(r0) [ 249.808715][ C0] scsi_io_completion_action: 3 callbacks suppressed [ 249.808744][ C0] sd 0:0:1:0: tag#400 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 249.825117][ C0] sd 0:0:1:0: tag#400 CDB: opcode=0xe5 (vendor) [ 249.831655][ C0] sd 0:0:1:0: tag#400 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 249.840879][ C0] sd 0:0:1:0: tag#400 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 249.850167][ C0] sd 0:0:1:0: tag#400 CDB[20]: 80 19 17:43:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0d, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:21 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x48, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 249.911150][T22643] loop3: detected capacity change from 0 to 1054 [ 249.918256][T22643] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 249.929419][T22643] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 249.944874][T22643] EXT4-fs (loop3): get root inode failed [ 249.950528][T22643] EXT4-fs (loop3): mount failed 17:43:21 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x15, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:21 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x55, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 250.002925][T22677] loop5: detected capacity change from 0 to 1054 [ 250.016237][T22677] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 250.031445][T22678] loop3: detected capacity change from 0 to 1054 [ 250.039724][ C0] sd 0:0:1:0: tag#436 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 17:43:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x18300200, 0x0) close(r0) [ 250.049516][ C0] sd 0:0:1:0: tag#436 CDB: opcode=0xe5 (vendor) [ 250.055778][ C0] sd 0:0:1:0: tag#436 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 250.064719][ C0] sd 0:0:1:0: tag#436 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 250.073669][ C0] sd 0:0:1:0: tag#436 CDB[20]: 80 19 [ 250.088777][T22677] EXT4-fs (loop5): orphan cleanup on readonly fs [ 250.095183][T22677] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 250.108949][T22677] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 250.119841][T22677] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 250.134013][T22677] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 250.140707][T22677] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 250.153166][T22678] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 250.206997][T22678] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 250.246390][T22678] EXT4-fs (loop3): get root inode failed [ 250.252088][T22678] EXT4-fs (loop3): mount failed 17:43:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0e, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 250.340795][T22678] loop3: detected capacity change from 0 to 1054 [ 250.361215][T22678] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 250.400135][ C1] sd 0:0:1:0: tag#410 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 250.409934][ C1] sd 0:0:1:0: tag#410 CDB: opcode=0xe5 (vendor) [ 250.416340][ C1] sd 0:0:1:0: tag#410 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 250.425319][ C1] sd 0:0:1:0: tag#410 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 250.434322][ C1] sd 0:0:1:0: tag#410 CDB[20]: 80 19 [ 250.444138][T22678] EXT4-fs: failed to create workqueue 17:43:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x18320200, 0x0) close(r0) 17:43:21 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x56, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 250.449530][T22678] EXT4-fs (loop3): mount failed [ 250.460801][T22713] loop5: detected capacity change from 0 to 1054 17:43:21 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x16, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 250.504604][T22713] loop5: detected capacity change from 0 to 1054 [ 250.528147][T22713] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 250.577298][T22736] loop3: detected capacity change from 0 to 1054 [ 250.587469][T22713] EXT4-fs (loop5): orphan cleanup on readonly fs [ 250.593937][T22713] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 250.607678][T22713] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 250.618544][T22713] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 250.632661][T22713] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 250.639330][T22713] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0f, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 250.669730][ C0] sd 0:0:1:0: tag#424 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 250.679490][ C0] sd 0:0:1:0: tag#424 CDB: opcode=0xe5 (vendor) [ 250.685771][ C0] sd 0:0:1:0: tag#424 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 250.694725][ C0] sd 0:0:1:0: tag#424 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 250.703691][ C0] sd 0:0:1:0: tag#424 CDB[20]: 80 19 17:43:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x18800400, 0x0) close(r0) 17:43:21 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x49, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 250.755673][ C1] sd 0:0:1:0: tag#444 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 250.765448][ C1] sd 0:0:1:0: tag#444 CDB: opcode=0xe5 (vendor) [ 250.771808][ C1] sd 0:0:1:0: tag#444 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 250.780826][ C1] sd 0:0:1:0: tag#444 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 250.789806][ C1] sd 0:0:1:0: tag#444 CDB[20]: 80 19 17:43:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x57, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:22 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x17, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 250.871878][T22759] loop3: detected capacity change from 0 to 1054 [ 250.918654][T22759] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 250.936081][T22773] loop5: detected capacity change from 0 to 1054 [ 250.958370][T22759] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 250.970789][ C0] sd 0:0:1:0: tag#420 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 250.980587][ C0] sd 0:0:1:0: tag#420 CDB: opcode=0xe5 (vendor) [ 250.986857][ C0] sd 0:0:1:0: tag#420 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 250.995927][ C0] sd 0:0:1:0: tag#420 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 251.004886][ C0] sd 0:0:1:0: tag#420 CDB[20]: 80 19 17:43:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x19000000, 0x0) close(r0) [ 251.011946][T22773] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 251.017369][T22759] EXT4-fs (loop3): get root inode failed [ 251.027059][T22759] EXT4-fs (loop3): mount failed [ 251.033473][ C1] sd 0:0:1:0: tag#421 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 251.043256][ C1] sd 0:0:1:0: tag#421 CDB: opcode=0xe5 (vendor) [ 251.049533][ C1] sd 0:0:1:0: tag#421 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 251.058580][ C1] sd 0:0:1:0: tag#421 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 251.067541][ C1] sd 0:0:1:0: tag#421 CDB[20]: 80 19 [ 251.108518][T22773] EXT4-fs (loop5): orphan cleanup on readonly fs [ 251.114888][T22773] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 251.128732][T22773] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 251.139607][T22773] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 251.153817][T22773] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 251.160513][T22773] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 251.181210][T22759] loop3: detected capacity change from 0 to 1054 [ 251.198954][T22759] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x1b000000, 0x0) close(r0) 17:43:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c10, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x58, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:22 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:22 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x18, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 251.223731][T22759] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 251.255320][T22759] EXT4-fs (loop3): get root inode failed [ 251.261087][T22759] EXT4-fs (loop3): mount failed 17:43:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x7, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 251.324084][T22814] loop5: detected capacity change from 0 to 1054 [ 251.337461][ C0] sd 0:0:1:0: tag#446 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 251.347346][ C0] sd 0:0:1:0: tag#446 CDB: opcode=0xe5 (vendor) [ 251.353606][ C0] sd 0:0:1:0: tag#446 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 251.362552][ C0] sd 0:0:1:0: tag#446 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 251.371511][ C0] sd 0:0:1:0: tag#446 CDB[20]: 80 19 [ 251.399255][T22814] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 251.448889][T22814] EXT4-fs (loop5): orphan cleanup on readonly fs [ 251.450497][ C0] sd 0:0:1:0: tag#421 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 251.455247][T22814] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 251.464975][ C0] sd 0:0:1:0: tag#421 CDB: opcode=0xe5 (vendor) [ 251.464992][ C0] sd 0:0:1:0: tag#421 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 251.465011][ C0] sd 0:0:1:0: tag#421 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 251.478705][T22814] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 251.484917][ C0] sd 0:0:1:0: tag#421 CDB[20]: 80 19 [ 251.493854][T22814] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 251.533078][T22814] EXT4-fs (loop5): Cannot turn on quotas: error -117 17:43:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x1c0a0200, 0x0) close(r0) [ 251.533098][T22814] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 251.555952][T22823] loop3: detected capacity change from 0 to 1054 [ 251.565467][T22823] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 251.582895][T22823] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:43:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x59, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c11, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 251.583502][T22823] EXT4-fs (loop3): get root inode failed [ 251.583514][T22823] EXT4-fs (loop3): mount failed 17:43:22 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x19, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:22 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 251.652540][T22823] loop3: detected capacity change from 0 to 1054 [ 251.662202][T22823] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 251.728332][T22823] EXT4-fs: failed to create workqueue [ 251.733715][T22823] EXT4-fs (loop3): mount failed [ 251.740891][ C0] sd 0:0:1:0: tag#439 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 251.750690][ C0] sd 0:0:1:0: tag#439 CDB: opcode=0xe5 (vendor) [ 251.756968][ C0] sd 0:0:1:0: tag#439 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 251.765921][ C0] sd 0:0:1:0: tag#439 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 17:43:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x20000000, 0x0) close(r0) [ 251.774868][ C0] sd 0:0:1:0: tag#439 CDB[20]: 80 19 17:43:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x8, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 251.799759][T22855] loop5: detected capacity change from 0 to 1054 [ 251.833053][T22855] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 251.885340][T22855] EXT4-fs (loop5): orphan cleanup on readonly fs [ 251.891757][T22855] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 251.905570][T22855] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 251.916622][T22855] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 251.930640][T22855] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 251.937370][T22855] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 251.991795][T22879] loop3: detected capacity change from 0 to 1054 [ 252.015236][T22879] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c12, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 252.048179][T22879] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:43:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x200e0200, 0x0) close(r0) [ 252.137319][T22879] EXT4-fs (loop3): get root inode failed [ 252.143019][T22879] EXT4-fs (loop3): mount failed [ 252.167177][T22892] loop5: detected capacity change from 0 to 1054 17:43:23 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:23 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 252.184372][T22892] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 252.207956][T22879] loop3: detected capacity change from 0 to 1054 [ 252.234948][T22892] EXT4-fs (loop5): orphan cleanup on readonly fs [ 252.241321][T22892] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 252.255151][T22892] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 252.266092][T22892] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 252.268281][T22879] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 252.280087][T22892] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 252.280182][T22892] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x9, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 252.336165][T22879] EXT4-fs: failed to create workqueue [ 252.341651][T22879] EXT4-fs (loop3): mount failed 17:43:23 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c18, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:23 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1a, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x20800400, 0x0) close(r0) [ 252.501092][T22921] loop3: detected capacity change from 0 to 1054 [ 252.551339][T22921] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 252.564290][T22934] loop5: detected capacity change from 0 to 1054 [ 252.574277][T22934] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 252.584421][T22921] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 252.597307][T22921] EXT4-fs (loop3): get root inode failed [ 252.602995][T22921] EXT4-fs (loop3): mount failed [ 252.610819][T22934] EXT4-fs (loop5): orphan cleanup on readonly fs [ 252.617203][T22934] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 252.630960][T22934] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 252.642047][T22934] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 252.656249][T22934] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 252.663039][T22934] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 252.725161][T22921] loop3: detected capacity change from 0 to 1054 [ 252.753050][T22921] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:23 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5d, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c19, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x25ec0100, 0x0) close(r0) [ 252.829119][T22921] EXT4-fs: failed to create workqueue [ 252.834605][T22921] EXT4-fs (loop3): mount failed 17:43:23 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4d, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xa, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 252.947238][T22972] loop5: detected capacity change from 0 to 1054 [ 252.958025][T22972] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 252.981231][T22972] EXT4-fs (loop5): orphan cleanup on readonly fs 17:43:24 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 252.987607][T22972] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 253.001532][T22972] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 253.012434][T22972] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 253.026430][T22972] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 253.033112][T22972] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:24 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1b, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:24 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x27310600, 0x0) close(r0) 17:43:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c22, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 253.116776][T22992] loop3: detected capacity change from 0 to 1054 17:43:24 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5f, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 253.168107][T22992] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 253.194312][T22992] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 253.237950][T22992] EXT4-fs (loop3): get root inode failed [ 253.243863][T22992] EXT4-fs (loop3): mount failed [ 253.280005][T23013] loop5: detected capacity change from 0 to 1054 [ 253.324026][T22992] loop3: detected capacity change from 0 to 1054 [ 253.339260][T22992] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 253.349360][T23013] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 253.360483][T23013] EXT4-fs (loop5): orphan cleanup on readonly fs 17:43:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x2b000000, 0x0) close(r0) [ 253.366855][T23013] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 253.378586][T22992] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 253.380582][T23013] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 253.403408][T23013] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 253.417484][T23013] EXT4-fs (loop5): Cannot turn on quotas: error -117 17:43:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c25, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 253.418151][T22992] EXT4-fs (loop3): get root inode failed [ 253.424153][T23013] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 253.440812][T22992] EXT4-fs (loop3): mount failed 17:43:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xb, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:24 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1c, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:24 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x60, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:24 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4f, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x2f000000, 0x0) close(r0) [ 253.591405][T23056] loop5: detected capacity change from 0 to 1054 [ 253.623092][T23061] loop3: detected capacity change from 0 to 1054 [ 253.637334][T23056] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 17:43:24 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x61, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 253.681510][T23061] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 253.717051][T23056] EXT4-fs (loop5): orphan cleanup on readonly fs [ 253.723547][T23056] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 253.737372][T23056] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 253.748240][T23056] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 253.762214][T23056] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 253.768890][T23056] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:24 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1d, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 253.785018][T23061] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 253.815058][T23061] EXT4-fs (loop3): get root inode failed [ 253.820732][T23061] EXT4-fs (loop3): mount failed 17:43:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c2e, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:24 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x62, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 253.869481][T23061] loop3: detected capacity change from 0 to 1054 [ 253.884791][T23061] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x2f0e0200, 0x0) close(r0) [ 253.946415][T23061] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 253.982816][T23103] loop5: detected capacity change from 0 to 1054 [ 254.014714][T23061] EXT4-fs (loop3): get root inode failed [ 254.020376][T23061] EXT4-fs (loop3): mount failed [ 254.029402][T23103] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 254.075078][T23103] EXT4-fs (loop5): orphan cleanup on readonly fs [ 254.081434][T23103] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 254.095205][T23103] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 254.106093][T23103] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xc, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 254.120308][T23103] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 254.120358][T23103] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:25 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x50, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c32, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x33000000, 0x0) close(r0) 17:43:25 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1e, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 254.222164][T23124] loop3: detected capacity change from 0 to 1054 [ 254.260758][T23124] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 254.282846][T23129] loop5: detected capacity change from 0 to 1054 [ 254.307671][T23129] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 254.322011][T23124] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 254.378442][T23129] EXT4-fs (loop5): orphan cleanup on readonly fs [ 254.384825][T23129] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 254.398612][T23129] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 254.409516][T23129] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 254.423510][T23129] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 254.430208][T23129] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.443664][T23124] EXT4-fs (loop3): get root inode failed [ 254.449347][T23124] EXT4-fs (loop3): mount failed 17:43:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x37000000, 0x0) close(r0) [ 254.527057][T23124] loop3: detected capacity change from 0 to 1054 [ 254.548519][T23124] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 254.597494][T23124] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 254.610440][T23124] EXT4-fs (loop3): get root inode failed [ 254.616104][T23124] EXT4-fs (loop3): mount failed 17:43:25 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x51, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xd, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x38090200, 0x0) close(r0) 17:43:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c48, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:25 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x63, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:25 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x21, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 254.731374][T23171] loop3: detected capacity change from 0 to 1054 [ 254.786608][T23171] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 254.818892][T23187] loop5: detected capacity change from 0 to 1054 [ 254.830859][T23171] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 254.855872][T23187] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 254.872059][T23171] EXT4-fs (loop3): get root inode failed [ 254.877798][T23171] EXT4-fs (loop3): mount failed [ 254.884967][T23187] EXT4-fs (loop5): orphan cleanup on readonly fs [ 254.891358][T23187] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 254.905361][T23187] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 254.916400][T23187] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 254.930682][T23187] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 254.937441][T23187] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.983321][T23171] loop3: detected capacity change from 0 to 1054 [ 254.990808][ C0] scsi_io_completion_action: 12 callbacks suppressed [ 254.990836][ C0] sd 0:0:1:0: tag#450 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 255.007371][ C0] sd 0:0:1:0: tag#450 CDB: opcode=0xe5 (vendor) [ 255.013734][ C0] sd 0:0:1:0: tag#450 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 17:43:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x3f000000, 0x0) close(r0) 17:43:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c4c, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 255.013750][ C0] sd 0:0:1:0: tag#450 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 255.013764][ C0] sd 0:0:1:0: tag#450 CDB[20]: 80 19 [ 255.018367][T23171] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 255.069851][T23171] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:43:26 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x64, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:26 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x52, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:26 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x22, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 255.085540][T23171] EXT4-fs (loop3): get root inode failed [ 255.091210][T23171] EXT4-fs (loop3): mount failed 17:43:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xe, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 255.185317][T23222] loop5: detected capacity change from 0 to 1054 [ 255.192111][ C1] sd 0:0:1:0: tag#429 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 255.202001][ C1] sd 0:0:1:0: tag#429 CDB: opcode=0xe5 (vendor) [ 255.208355][ C1] sd 0:0:1:0: tag#429 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 255.217322][ C1] sd 0:0:1:0: tag#429 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 255.226294][ C1] sd 0:0:1:0: tag#429 CDB[20]: 80 19 17:43:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x3f030000, 0x0) close(r0) [ 255.261204][T23222] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 255.296844][T23236] loop3: detected capacity change from 0 to 1054 [ 255.313159][T23222] EXT4-fs (loop5): orphan cleanup on readonly fs [ 255.319511][T23222] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 255.333332][T23222] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 255.344188][T23222] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 255.358216][T23222] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 255.364909][T23222] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 255.385167][ C0] sd 0:0:1:0: tag#482 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 255.394939][ C0] sd 0:0:1:0: tag#482 CDB: opcode=0xe5 (vendor) [ 255.401277][ C0] sd 0:0:1:0: tag#482 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c 17:43:26 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x65, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c54, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 255.410245][ C0] sd 0:0:1:0: tag#482 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 255.419232][ C0] sd 0:0:1:0: tag#482 CDB[20]: 80 19 [ 255.510876][T23236] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 255.536096][T23236] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:43:26 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x23, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:26 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x53, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 255.561931][T23260] loop5: detected capacity change from 0 to 1054 [ 255.596564][T23236] EXT4-fs (loop3): get root inode failed [ 255.602290][T23236] EXT4-fs (loop3): mount failed [ 255.613053][T23260] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 255.633867][ C1] sd 0:0:1:0: tag#473 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 255.639095][T23260] EXT4-fs (loop5): orphan cleanup on readonly fs [ 255.643624][ C1] sd 0:0:1:0: tag#473 CDB: opcode=0xe5 (vendor) [ 255.643642][ C1] sd 0:0:1:0: tag#473 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 255.643658][ C1] sd 0:0:1:0: tag#473 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 255.649986][T23260] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 255.656229][ C1] sd 0:0:1:0: tag#473 CDB[20]: 80 19 [ 255.665140][T23260] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 17:43:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x40000000, 0x0) close(r0) 17:43:26 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x66, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 255.703886][T23260] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 255.717917][T23260] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 255.724659][T23260] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c55, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 255.757546][T23236] loop3: detected capacity change from 0 to 1054 17:43:26 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x54, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 255.816210][T23236] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 255.864826][ C0] sd 0:0:1:0: tag#463 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 255.866176][T23236] EXT4-fs: failed to create workqueue [ 255.874700][ C0] sd 0:0:1:0: tag#463 CDB: opcode=0xe5 (vendor) [ 255.880057][T23236] EXT4-fs (loop3): mount failed [ 255.891122][ C0] sd 0:0:1:0: tag#463 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 255.891852][T23296] loop5: detected capacity change from 0 to 1054 [ 255.900063][ C0] sd 0:0:1:0: tag#463 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 17:43:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x46320600, 0x0) close(r0) 17:43:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c56, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xf, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 255.900082][ C0] sd 0:0:1:0: tag#463 CDB[20]: 80 19 17:43:26 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x67, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:26 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x55, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:26 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x24, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 255.986234][T23308] loop5: detected capacity change from 0 to 1054 [ 256.017582][T23308] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 256.055534][T23321] loop3: detected capacity change from 0 to 1054 [ 256.069180][T23308] EXT4-fs (loop5): orphan cleanup on readonly fs [ 256.075548][T23308] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 256.089428][T23308] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 256.100326][T23308] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 256.114378][T23308] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 256.121081][T23308] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.138965][ C0] sd 0:0:1:0: tag#449 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 256.148744][ C0] sd 0:0:1:0: tag#449 CDB: opcode=0xe5 (vendor) 17:43:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x57000000, 0x0) close(r0) [ 256.152789][T23321] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 256.154990][ C0] sd 0:0:1:0: tag#449 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 256.155029][ C0] sd 0:0:1:0: tag#449 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 256.155046][ C0] sd 0:0:1:0: tag#449 CDB[20]: 80 19 17:43:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c60, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 256.234023][T23321] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 256.263830][T23321] EXT4-fs (loop3): get root inode failed [ 256.269494][T23321] EXT4-fs (loop3): mount failed 17:43:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5d320600, 0x0) close(r0) [ 256.276134][ C1] sd 0:0:1:0: tag#498 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 256.285938][ C1] sd 0:0:1:0: tag#498 CDB: opcode=0xe5 (vendor) [ 256.292221][ C1] sd 0:0:1:0: tag#498 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 256.301182][ C1] sd 0:0:1:0: tag#498 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 256.310164][ C1] sd 0:0:1:0: tag#498 CDB[20]: 80 19 17:43:27 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x68, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:27 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x56, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 256.356602][T23321] loop3: detected capacity change from 0 to 1054 [ 256.367253][T23321] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 256.369433][T23347] loop5: detected capacity change from 0 to 1054 17:43:27 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x25, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 256.413784][T23321] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 256.436019][T23321] EXT4-fs (loop3): get root inode failed [ 256.441768][T23321] EXT4-fs (loop3): mount failed [ 256.448103][T23347] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 256.501224][T23347] EXT4-fs (loop5): orphan cleanup on readonly fs [ 256.507593][T23347] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 256.521344][T23347] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 256.532391][T23347] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5e0e0600, 0x0) close(r0) 17:43:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x10, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 256.546431][T23347] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 256.553180][T23347] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.588252][ C0] sd 0:0:1:0: tag#476 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 256.598018][ C0] sd 0:0:1:0: tag#476 CDB: opcode=0xe5 (vendor) [ 256.604266][ C0] sd 0:0:1:0: tag#476 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 256.613222][ C0] sd 0:0:1:0: tag#476 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 256.622162][ C0] sd 0:0:1:0: tag#476 CDB[20]: 80 19 17:43:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c68, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:27 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x57, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 256.778003][T23388] loop3: detected capacity change from 0 to 1054 [ 256.794397][T23392] loop5: detected capacity change from 0 to 1054 [ 256.820962][T23392] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 256.838443][T23388] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 256.849746][T23392] EXT4-fs (loop5): orphan cleanup on readonly fs [ 256.856103][T23392] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 256.863462][ C0] sd 0:0:1:0: tag#489 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 256.869888][T23392] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 256.879578][ C0] sd 0:0:1:0: tag#489 CDB: opcode=0xe5 (vendor) [ 256.890396][T23392] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 256.890417][T23392] EXT4-fs (loop5): Cannot turn on quotas: error -117 17:43:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c6c, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5f000000, 0x0) close(r0) [ 256.896629][ C0] sd 0:0:1:0: tag#489 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 256.896649][ C0] sd 0:0:1:0: tag#489 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 256.910706][T23392] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.917362][ C0] sd 0:0:1:0: tag#489 CDB[20]: 80 19 [ 256.985393][T23388] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 257.019899][T23388] EXT4-fs (loop3): get root inode failed [ 257.025588][T23388] EXT4-fs (loop3): mount failed 17:43:28 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x26, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:28 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x69, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 257.034151][T23410] loop5: detected capacity change from 0 to 1054 [ 257.047418][T23410] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 257.066231][T23388] loop3: detected capacity change from 0 to 1054 [ 257.111007][T23410] EXT4-fs (loop5): orphan cleanup on readonly fs [ 257.117385][T23410] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 257.120703][T23388] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 257.131137][T23410] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 17:43:28 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x58, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x5f010000, 0x0) close(r0) [ 257.151261][T23410] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 257.165345][T23410] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 257.172034][T23410] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.195009][T23388] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 257.221185][T23388] EXT4-fs (loop3): get root inode failed [ 257.226843][T23388] EXT4-fs (loop3): mount failed [ 257.232531][ C1] sd 0:0:1:0: tag#460 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 257.242290][ C1] sd 0:0:1:0: tag#460 CDB: opcode=0xe5 (vendor) [ 257.248549][ C1] sd 0:0:1:0: tag#460 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 257.257488][ C1] sd 0:0:1:0: tag#460 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 257.266457][ C1] sd 0:0:1:0: tag#460 CDB[20]: 80 19 17:43:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x11, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c74, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x67000000, 0x0) close(r0) [ 257.467683][T23455] loop3: detected capacity change from 0 to 1054 [ 257.487640][T23460] loop5: detected capacity change from 0 to 1054 [ 257.501109][T23455] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 257.514346][T23460] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 257.526289][T23455] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 257.539532][T23460] EXT4-fs (loop5): orphan cleanup on readonly fs [ 257.545880][T23460] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # 17:43:28 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x27, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:28 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x6f000000, 0x0) close(r0) [ 257.559658][T23460] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 257.570522][T23460] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 257.584653][T23460] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 257.591355][T23460] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:28 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x59, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 257.621836][T23455] EXT4-fs (loop3): get root inode failed [ 257.627504][T23455] EXT4-fs (loop3): mount failed [ 257.683682][T23455] loop3: detected capacity change from 0 to 1054 [ 257.692528][T23455] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 257.708938][T23455] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 257.724027][T23455] EXT4-fs (loop3): get root inode failed 17:43:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x12, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 257.729764][T23455] EXT4-fs (loop3): mount failed 17:43:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c7a, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 257.809535][T23498] loop3: detected capacity change from 0 to 1054 [ 257.845516][T23498] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x721e0600, 0x0) close(r0) [ 257.875426][T23498] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 257.903013][T23498] EXT4-fs (loop3): get root inode failed [ 257.908701][T23498] EXT4-fs (loop3): mount failed 17:43:28 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 257.940397][T23498] loop3: detected capacity change from 0 to 1054 [ 257.962757][T23498] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 257.964653][T23513] loop5: detected capacity change from 0 to 1054 17:43:28 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 257.999753][T23513] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 258.015064][T23498] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 258.059616][T23513] EXT4-fs (loop5): orphan cleanup on readonly fs [ 258.066037][T23513] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 258.078142][T23498] EXT4-fs (loop3): get root inode failed [ 258.079914][T23513] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 258.085529][T23498] EXT4-fs (loop3): mount failed 17:43:29 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x28, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 258.096380][T23513] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 258.115159][T23513] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 258.121829][T23513] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x1a, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83cdc, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x74090200, 0x0) close(r0) 17:43:29 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x29, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 258.315676][T23550] loop3: detected capacity change from 0 to 1054 [ 258.346566][T23562] loop5: detected capacity change from 0 to 1054 [ 258.346671][T23550] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:29 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 258.371402][T23550] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 258.389535][T23550] EXT4-fs (loop3): get root inode failed [ 258.395232][T23550] EXT4-fs (loop3): mount failed [ 258.397545][T23562] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 258.447337][T23562] EXT4-fs (loop5): orphan cleanup on readonly fs [ 258.453780][T23562] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 258.467961][T23562] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 258.478961][T23562] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 258.493169][T23562] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 258.499865][T23562] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 258.514895][T23550] loop3: detected capacity change from 0 to 1054 17:43:29 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83cfe, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:29 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 258.544444][T23550] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x7f010000, 0x0) close(r0) [ 258.607167][T23550] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 258.649625][T23550] EXT4-fs (loop3): get root inode failed [ 258.655331][T23550] EXT4-fs (loop3): mount failed 17:43:29 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2a, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 258.705849][T23604] loop5: detected capacity change from 0 to 1054 [ 258.733944][T23604] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 258.764598][T23604] EXT4-fs (loop5): orphan cleanup on readonly fs [ 258.770957][T23604] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 258.784754][T23604] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 258.795725][T23604] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x2e, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:29 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6d, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x7f030000, 0x0) close(r0) [ 258.809809][T23604] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 258.816503][T23604] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:29 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5d, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x84000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 258.923480][T23630] loop3: detected capacity change from 0 to 1054 [ 258.953377][T23630] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 258.985863][T23640] loop5: detected capacity change from 0 to 1056 [ 259.005513][T23630] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 259.018286][T23640] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 259.061657][T23630] EXT4-fs (loop3): get root inode failed [ 259.067348][T23630] EXT4-fs (loop3): mount failed [ 259.086092][T23640] EXT4-fs (loop5): orphan cleanup on readonly fs [ 259.092450][T23640] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 259.106216][T23640] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 259.117077][T23640] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 259.131250][T23640] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 259.137946][T23640] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.204259][T23630] loop3: detected capacity change from 0 to 1054 [ 259.215252][T23630] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 259.239995][T23630] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:43:30 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 259.275602][T23630] EXT4-fs (loop3): get root inode failed [ 259.281401][T23630] EXT4-fs (loop3): mount failed 17:43:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8feff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x43, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x7f050000, 0x0) close(r0) 17:43:30 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:30 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6f, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 259.470880][T23677] loop5: detected capacity change from 0 to 1151 [ 259.483058][T23679] loop3: detected capacity change from 0 to 1054 [ 259.509810][T23677] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 17:43:30 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2b, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 259.541528][T23679] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 259.576116][T23677] EXT4-fs (loop5): orphan cleanup on readonly fs [ 259.582526][T23677] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 259.596311][T23677] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 259.607211][T23677] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 259.621214][T23677] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 259.627892][T23677] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x2, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x7f060000, 0x0) close(r0) 17:43:30 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x70, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 259.644085][T23679] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 259.677427][T23679] EXT4-fs (loop3): get root inode failed [ 259.683203][T23679] EXT4-fs (loop3): mount failed 17:43:30 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5f, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 259.735913][T23679] loop3: detected capacity change from 0 to 1054 [ 259.754867][T23679] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 259.762305][T23712] loop5: detected capacity change from 0 to 1054 [ 259.793171][T23712] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 259.817073][T23712] EXT4-fs error (device loop5): ext4_fill_super:4810: inode #2: comm syz-executor.5: iget: root inode unallocated [ 259.829415][T23712] EXT4-fs (loop5): get root inode failed [ 259.835102][T23712] EXT4-fs (loop5): mount failed 17:43:30 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2c, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 259.840798][T23679] EXT4-fs: failed to create workqueue [ 259.846300][T23679] EXT4-fs (loop3): mount failed 17:43:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x56, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 259.899490][T23712] loop5: detected capacity change from 0 to 1054 [ 259.912793][T23712] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 259.950681][T23712] EXT4-fs error (device loop5): ext4_fill_super:4810: inode #2: comm syz-executor.5: iget: root inode unallocated [ 259.962720][T23712] EXT4-fs (loop5): get root inode failed [ 259.968343][T23712] EXT4-fs (loop5): mount failed 17:43:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x9f010000, 0x0) close(r0) 17:43:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 260.023587][T23746] loop3: detected capacity change from 0 to 1054 17:43:30 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x71, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 260.067475][T23746] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 260.101361][T23746] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated 17:43:31 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x60, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 260.150753][T23746] EXT4-fs (loop3): get root inode failed [ 260.156434][T23746] EXT4-fs (loop3): mount failed [ 260.172405][T23767] loop5: detected capacity change from 0 to 1054 17:43:31 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2d, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 260.198641][T23767] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 260.221659][T23767] EXT4-fs error (device loop5): ext4_fill_super:4810: inode #2: comm syz-executor.5: iget: root inode unallocated [ 260.233975][T23767] EXT4-fs (loop5): get root inode failed [ 260.239648][T23767] EXT4-fs (loop5): mount failed 17:43:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x9f660000, 0x0) close(r0) [ 260.247568][T23746] loop3: detected capacity change from 0 to 1054 [ 260.254808][T23746] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 260.274687][T23746] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 260.292547][ C0] scsi_io_completion_action: 13 callbacks suppressed 17:43:31 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x72, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 260.292585][ C0] sd 0:0:1:0: tag#469 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 260.309108][ C0] sd 0:0:1:0: tag#469 CDB: opcode=0xe5 (vendor) [ 260.315378][ C0] sd 0:0:1:0: tag#469 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 260.323705][T23746] EXT4-fs (loop3): get root inode failed [ 260.324334][ C0] sd 0:0:1:0: tag#469 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 260.330048][T23746] EXT4-fs (loop3): mount failed [ 260.339037][ C0] sd 0:0:1:0: tag#469 CDB[20]: 80 19 17:43:31 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x61, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 260.383301][T23767] loop5: detected capacity change from 0 to 1054 [ 260.400066][T23767] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 260.411058][T23767] EXT4-fs error (device loop5): ext4_fill_super:4810: inode #2: comm syz-executor.5: iget: root inode unallocated [ 260.423227][T23767] EXT4-fs (loop5): get root inode failed 17:43:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 260.428846][T23767] EXT4-fs (loop5): mount failed 17:43:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xfe, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 260.506189][T23810] loop5: detected capacity change from 0 to 1054 [ 260.539972][T23810] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 260.581210][T23810] EXT4-fs error (device loop5): ext4_fill_super:4810: inode #2: comm syz-executor.5: iget: root inode unallocated [ 260.593268][T23810] EXT4-fs (loop5): get root inode failed [ 260.598923][T23810] EXT4-fs (loop5): mount failed 17:43:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xa2810200, 0x0) close(r0) [ 260.628076][ C0] sd 0:0:1:0: tag#481 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 260.637851][ C0] sd 0:0:1:0: tag#481 CDB: opcode=0xe5 (vendor) [ 260.644125][ C0] sd 0:0:1:0: tag#481 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 260.653076][ C0] sd 0:0:1:0: tag#481 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 260.662081][ C0] sd 0:0:1:0: tag#481 CDB[20]: 80 19 [ 260.685200][T23821] loop3: detected capacity change from 0 to 1054 [ 260.707962][T23821] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:31 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x62, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:31 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x73, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 260.730925][T23810] loop5: detected capacity change from 0 to 1054 [ 260.742654][T23821] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 260.755028][T23810] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 17:43:31 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2e, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 260.785733][T23821] EXT4-fs (loop3): get root inode failed [ 260.791404][T23821] EXT4-fs (loop3): mount failed [ 260.797125][T23810] EXT4-fs error (device loop5): ext4_fill_super:4810: inode #2: comm syz-executor.5: iget: root inode unallocated [ 260.809274][T23810] EXT4-fs (loop5): get root inode failed [ 260.814925][T23810] EXT4-fs (loop5): mount failed [ 260.875754][ C1] sd 0:0:1:0: tag#457 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 260.885531][ C1] sd 0:0:1:0: tag#457 CDB: opcode=0xe5 (vendor) [ 260.891795][ C1] sd 0:0:1:0: tag#457 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 260.900776][ C1] sd 0:0:1:0: tag#457 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 260.902674][T23853] loop5: detected capacity change from 0 to 1054 [ 260.909928][ C1] sd 0:0:1:0: tag#457 CDB[20]: 80 19 [ 260.937266][T23853] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 260.955939][T23853] EXT4-fs (loop5): orphan cleanup on readonly fs [ 260.962296][T23853] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 260.976100][T23853] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 17:43:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xaf000000, 0x0) close(r0) [ 260.976118][T23853] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 260.976171][T23853] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 261.007839][T23853] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.009896][ C1] sd 0:0:1:0: tag#489 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 261.028673][ C1] sd 0:0:1:0: tag#489 CDB: opcode=0xe5 (vendor) [ 261.034944][ C1] sd 0:0:1:0: tag#489 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 261.043915][ C1] sd 0:0:1:0: tag#489 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 261.052882][ C1] sd 0:0:1:0: tag#489 CDB[20]: 80 19 [ 261.064932][T23821] loop3: detected capacity change from 0 to 1054 17:43:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x7, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:31 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x74, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 261.089524][T23821] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 261.114636][T23821] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 261.127084][T23821] EXT4-fs (loop3): get root inode failed [ 261.132831][T23821] EXT4-fs (loop3): mount failed 17:43:32 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x63, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:32 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x2f, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x20e, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 261.179675][T23883] loop5: detected capacity change from 0 to 1054 [ 261.256460][T23883] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 261.291223][ C1] sd 0:0:1:0: tag#501 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 261.298585][T23898] loop3: detected capacity change from 0 to 1054 [ 261.301017][ C1] sd 0:0:1:0: tag#501 CDB: opcode=0xe5 (vendor) [ 261.313546][ C1] sd 0:0:1:0: tag#501 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 261.322515][ C1] sd 0:0:1:0: tag#501 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 261.331461][ C1] sd 0:0:1:0: tag#501 CDB[20]: 80 19 [ 261.338459][T23883] EXT4-fs (loop5): orphan cleanup on readonly fs 17:43:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xbb5e0000, 0x0) close(r0) 17:43:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x20f, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 261.344991][T23883] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # 17:43:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x8, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 261.345092][T23883] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 261.345109][T23883] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 261.345145][T23883] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 261.345159][T23883] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.462932][ C1] sd 0:0:1:0: tag#457 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 261.472744][ C1] sd 0:0:1:0: tag#457 CDB: opcode=0xe5 (vendor) [ 261.479027][ C1] sd 0:0:1:0: tag#457 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 261.488107][ C1] sd 0:0:1:0: tag#457 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 261.497095][ C1] sd 0:0:1:0: tag#457 CDB[20]: 80 19 [ 261.525820][T23922] loop5: detected capacity change from 0 to 1054 17:43:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xbc260000, 0x0) close(r0) [ 261.538154][T23925] loop3: detected capacity change from 0 to 1054 [ 261.560267][T23922] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 261.574589][T23925] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 261.586858][T23922] EXT4-fs (loop5): orphan cleanup on readonly fs [ 261.593289][T23922] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 261.607893][T23922] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 261.618857][T23922] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 261.620466][T23925] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 261.632990][T23922] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 261.651828][T23925] EXT4-fs (loop3): get root inode failed [ 261.652152][T23922] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.657764][T23925] EXT4-fs (loop3): mount failed [ 261.685625][T23925] loop3: detected capacity change from 0 to 1054 17:43:32 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x75, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:32 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x64, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:32 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x30, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x9, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 261.711529][T23925] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 17:43:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xbc5e0000, 0x0) close(r0) [ 261.758011][T23925] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 261.785316][ C0] sd 0:0:1:0: tag#449 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 261.791278][T23925] EXT4-fs (loop3): get root inode failed [ 261.795075][ C0] sd 0:0:1:0: tag#449 CDB: opcode=0xe5 (vendor) [ 261.795092][ C0] sd 0:0:1:0: tag#449 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 261.800713][T23925] EXT4-fs (loop3): mount failed [ 261.806947][ C0] sd 0:0:1:0: tag#449 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 261.829631][ C0] sd 0:0:1:0: tag#449 CDB[20]: 80 19 [ 261.859924][T23968] loop5: detected capacity change from 0 to 1054 [ 261.870650][T23968] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 261.905730][T23968] EXT4-fs (loop5): orphan cleanup on readonly fs [ 261.912225][T23968] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 261.926425][T23968] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 261.937309][T23968] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xbd2d0600, 0x0) close(r0) 17:43:32 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x76, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3000, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:32 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x65, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xa, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 261.951325][T23968] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 261.957998][T23968] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.100371][T23998] loop5: detected capacity change from 0 to 1054 [ 262.117710][T23998] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 262.173837][T23998] EXT4-fs (loop5): orphan cleanup on readonly fs [ 262.180400][T23998] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 262.194764][T23998] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 262.205728][T23998] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xbf000000, 0x0) close(r0) [ 262.219797][T23998] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 262.226574][T23998] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.281234][ C1] sd 0:0:1:0: tag#481 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 262.291044][ C1] sd 0:0:1:0: tag#481 CDB: opcode=0xe5 (vendor) [ 262.291066][ C1] sd 0:0:1:0: tag#481 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 262.306469][ C1] sd 0:0:1:0: tag#481 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 262.315447][ C1] sd 0:0:1:0: tag#481 CDB[20]: 80 19 17:43:33 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x77, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:33 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x66, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:33 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x31, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 262.353143][T23992] loop3: detected capacity change from 0 to 264192 [ 262.377649][T23992] EXT4-fs (loop3): Invalid log block size: 1048576 17:43:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xbf010000, 0x0) close(r0) 17:43:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xb, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xfffe, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 262.469105][ C0] sd 0:0:1:0: tag#496 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 262.478878][ C0] sd 0:0:1:0: tag#496 CDB: opcode=0xe5 (vendor) [ 262.485145][ C0] sd 0:0:1:0: tag#496 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 262.494140][ C0] sd 0:0:1:0: tag#496 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 262.503101][ C0] sd 0:0:1:0: tag#496 CDB[20]: 80 19 17:43:33 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x67, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:33 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x78, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 262.646513][ C0] sd 0:0:1:0: tag#464 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 262.654937][T24046] loop5: detected capacity change from 0 to 1054 [ 262.656367][ C0] sd 0:0:1:0: tag#464 CDB: opcode=0xe5 (vendor) [ 262.669101][ C0] sd 0:0:1:0: tag#464 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 262.678222][ C0] sd 0:0:1:0: tag#464 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 262.687200][ C0] sd 0:0:1:0: tag#464 CDB[20]: 80 19 17:43:33 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x32, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:33 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x79, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 262.734064][T24046] loop5: detected capacity change from 0 to 1054 [ 262.752010][T24046] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 262.817021][T24046] EXT4-fs (loop5): orphan cleanup on readonly fs [ 262.823400][T24046] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 262.837384][T24046] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 262.848354][T24046] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xc, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xbf020000, 0x0) close(r0) [ 262.862383][T24046] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 262.869073][T24046] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:33 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x68, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:33 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:33 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x33, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 263.046926][T24082] loop5: detected capacity change from 0 to 1054 [ 263.066705][T24082] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 263.123045][T24082] EXT4-fs (loop5): orphan cleanup on readonly fs [ 263.129396][T24082] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 263.143138][T24082] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 263.154007][T24082] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 263.168171][T24082] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 263.174856][T24082] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xbfee0100, 0x0) close(r0) 17:43:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xd, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 263.424405][T24112] loop5: detected capacity change from 0 to 1054 [ 263.465718][T24112] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 263.493333][T24112] EXT4-fs (loop5): orphan cleanup on readonly fs [ 263.499714][T24112] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # 17:43:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xfffffffe, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:34 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x69, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:34 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x34, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xc0e80100, 0x0) close(r0) 17:43:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 263.513461][T24112] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 263.524337][T24112] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 263.538337][T24112] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 263.545001][T24112] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xe, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 263.732220][T24146] loop5: detected capacity change from 0 to 1054 [ 263.771276][T24146] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 263.830959][T24146] EXT4-fs (loop5): orphan cleanup on readonly fs [ 263.837396][T24146] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 263.851135][T24146] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 263.862020][T24146] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xc47e0000, 0x0) close(r0) [ 263.876013][T24146] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 263.882675][T24146] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:34 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x35, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:34 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xf, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 264.113058][T24180] loop5: detected capacity change from 0 to 1054 [ 264.139007][T24180] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 17:43:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xc5660000, 0x0) close(r0) [ 264.184631][T24180] EXT4-fs (loop5): orphan cleanup on readonly fs [ 264.190987][T24180] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 264.204769][T24180] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 264.215781][T24180] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 264.229819][T24180] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 264.236508][T24180] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xfffffffffffffffe, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x90, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x10, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xc57e0000, 0x0) close(r0) 17:43:35 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:35 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x36, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 264.636177][T24214] loop5: detected capacity change from 0 to 1054 [ 264.669607][T24214] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 264.714432][T24214] EXT4-fs (loop5): orphan cleanup on readonly fs [ 264.720796][T24214] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 264.734568][T24214] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 264.745471][T24214] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xcf000000, 0x0) close(r0) [ 264.759673][T24214] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 264.766368][T24214] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x11, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 265.065923][T24242] loop5: detected capacity change from 0 to 1054 17:43:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xa0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 265.108043][T24242] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 17:43:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xd10f0200, 0x0) close(r0) [ 265.164271][T24242] EXT4-fs (loop5): orphan cleanup on readonly fs [ 265.170618][T24242] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 265.184437][T24242] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 265.195358][T24242] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 265.209503][T24242] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 265.216217][T24242] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x12, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:36 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 265.386708][T24266] loop5: detected capacity change from 0 to 1054 [ 265.435210][T24266] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 265.474072][T24266] EXT4-fs (loop5): orphan cleanup on readonly fs [ 265.480450][T24266] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 265.494304][T24266] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 265.505192][T24266] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 265.519285][T24266] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 265.525978][T24266] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:36 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x37, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xb0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xd52b0600, 0x0) close(r0) 17:43:36 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6d, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x14, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 265.636149][ C1] scsi_io_completion_action: 10 callbacks suppressed [ 265.636172][ C1] sd 0:0:1:0: tag#478 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 265.652762][ C1] sd 0:0:1:0: tag#478 CDB: opcode=0xe5 (vendor) [ 265.659036][ C1] sd 0:0:1:0: tag#478 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 265.667983][ C1] sd 0:0:1:0: tag#478 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 265.676969][ C1] sd 0:0:1:0: tag#478 CDB[20]: 80 19 [ 265.772727][ C0] sd 0:0:1:0: tag#459 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 265.782512][ C0] sd 0:0:1:0: tag#459 CDB: opcode=0xe5 (vendor) [ 265.788760][ C0] sd 0:0:1:0: tag#459 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 265.797720][ C0] sd 0:0:1:0: tag#459 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 265.806675][ C0] sd 0:0:1:0: tag#459 CDB[20]: 80 19 [ 265.826556][T24302] loop5: detected capacity change from 0 to 1054 17:43:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xd9200100, 0x0) close(r0) 17:43:36 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x38, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 265.909476][T24302] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 265.959624][T24302] EXT4-fs (loop5): orphan cleanup on readonly fs [ 265.965986][T24302] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 265.979876][T24302] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 265.990795][T24302] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 266.004790][T24302] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 266.011501][T24302] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.022961][ C1] sd 0:0:1:0: tag#457 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 266.032718][ C1] sd 0:0:1:0: tag#457 CDB: opcode=0xe5 (vendor) [ 266.038968][ C1] sd 0:0:1:0: tag#457 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 266.047959][ C1] sd 0:0:1:0: tag#457 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 266.057026][ C1] sd 0:0:1:0: tag#457 CDB[20]: 80 19 17:43:36 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x25, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 266.206759][T24329] loop5: detected capacity change from 0 to 1054 [ 266.220865][T24329] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 266.257472][T24329] EXT4-fs (loop5): orphan cleanup on readonly fs [ 266.263850][T24329] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 266.277650][T24329] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 266.288531][T24329] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 266.302552][T24329] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 266.309251][T24329] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.313708][ C0] sd 0:0:1:0: tag#452 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 266.329929][ C0] sd 0:0:1:0: tag#452 CDB: opcode=0xe5 (vendor) [ 266.336263][ C0] sd 0:0:1:0: tag#452 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 266.345226][ C0] sd 0:0:1:0: tag#452 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 17:43:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x33, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 266.354200][ C0] sd 0:0:1:0: tag#452 CDB[20]: 80 19 [ 266.528133][T24351] loop5: detected capacity change from 0 to 1054 17:43:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="020000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xdf000000, 0x0) close(r0) 17:43:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:37 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x39, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:37 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6f, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 266.595417][T24351] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 266.606908][T24351] EXT4-fs (loop5): orphan cleanup on readonly fs [ 266.613282][T24351] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 266.627038][T24351] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 266.637907][T24351] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 266.651909][T24351] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 266.658658][T24351] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xe0070600, 0x0) close(r0) 17:43:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xfe, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 266.722925][T24368] loop3: detected capacity change from 0 to 1054 [ 266.754843][ C0] sd 0:0:1:0: tag#487 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 266.764607][ C0] sd 0:0:1:0: tag#487 CDB: opcode=0xe5 (vendor) [ 266.770848][ C0] sd 0:0:1:0: tag#487 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 266.780155][ C0] sd 0:0:1:0: tag#487 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 266.789122][ C0] sd 0:0:1:0: tag#487 CDB[20]: 80 19 [ 266.800373][T24368] EXT4-fs (loop3): inodes count not valid: 2 vs 32 [ 266.873744][T24368] loop3: detected capacity change from 0 to 1054 [ 266.883097][ C1] sd 0:0:1:0: tag#482 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 266.892911][ C1] sd 0:0:1:0: tag#482 CDB: opcode=0xe5 (vendor) [ 266.899167][ C1] sd 0:0:1:0: tag#482 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 266.908120][ C1] sd 0:0:1:0: tag#482 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 266.910725][T24368] EXT4-fs (loop3): inodes count not valid: 2 vs 32 [ 266.917079][ C1] sd 0:0:1:0: tag#482 CDB[20]: 80 19 17:43:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xe07e0000, 0x0) close(r0) [ 266.948008][T24393] loop5: detected capacity change from 0 to 1054 [ 266.958800][T24393] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 266.985452][T24393] EXT4-fs (loop5): orphan cleanup on readonly fs 17:43:37 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x70, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 266.991820][T24393] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 267.005653][T24393] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 267.016533][T24393] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 267.030615][T24393] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 267.037347][T24393] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="040000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xe17e0000, 0x0) close(r0) 17:43:37 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3a, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 267.127808][T24414] loop3: detected capacity change from 0 to 1054 17:43:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x20f, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 267.180344][ C1] sd 0:0:1:0: tag#487 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 267.190120][ C1] sd 0:0:1:0: tag#487 CDB: opcode=0xe5 (vendor) [ 267.196397][ C1] sd 0:0:1:0: tag#487 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 267.205453][ C1] sd 0:0:1:0: tag#487 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 267.214411][ C1] sd 0:0:1:0: tag#487 CDB[20]: 80 19 [ 267.314768][T24414] EXT4-fs (loop3): inodes count not valid: 4 vs 32 [ 267.354562][ C0] sd 0:0:1:0: tag#559 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 17:43:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xe4ff0500, 0x0) close(r0) [ 267.364332][ C0] sd 0:0:1:0: tag#559 CDB: opcode=0xe5 (vendor) [ 267.370610][ C0] sd 0:0:1:0: tag#559 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 267.379565][ C0] sd 0:0:1:0: tag#559 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 267.388519][ C0] sd 0:0:1:0: tag#559 CDB[20]: 80 19 [ 267.399936][T24414] loop3: detected capacity change from 0 to 1054 [ 267.418784][T24414] EXT4-fs (loop3): inodes count not valid: 4 vs 32 [ 267.430857][T24446] loop5: detected capacity change from 0 to 1054 [ 267.456055][T24446] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 17:43:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="060000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 267.478394][T24446] EXT4-fs (loop5): orphan cleanup on readonly fs [ 267.484748][T24446] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 267.498490][T24446] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 267.509354][T24446] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xea1b0600, 0x0) close(r0) 17:43:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x204, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 267.523377][T24446] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 267.530063][T24446] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:38 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x71, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:38 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3b, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x382, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 267.577824][T24460] loop3: detected capacity change from 0 to 1054 [ 267.611646][T24460] EXT4-fs (loop3): inodes count not valid: 6 vs 32 [ 267.668887][ C1] sd 0:0:1:0: tag#465 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 267.678652][ C1] sd 0:0:1:0: tag#465 CDB: opcode=0xe5 (vendor) [ 267.684907][ C1] sd 0:0:1:0: tag#465 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 267.693876][ C1] sd 0:0:1:0: tag#465 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 267.702839][ C1] sd 0:0:1:0: tag#465 CDB[20]: 80 19 [ 267.734091][T24478] loop5: detected capacity change from 0 to 1054 [ 267.769155][T24478] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 267.786311][T24460] loop3: detected capacity change from 0 to 1054 [ 267.811331][T24460] EXT4-fs (loop3): inodes count not valid: 6 vs 32 [ 267.831585][T24478] EXT4-fs (loop5): orphan cleanup on readonly fs [ 267.838394][T24478] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 267.852141][T24478] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 267.863013][T24478] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 267.877077][T24478] EXT4-fs (loop5): Cannot turn on quotas: error -117 17:43:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xed290600, 0x0) close(r0) 17:43:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="070000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 267.884052][T24478] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x384, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 267.952034][ C0] sd 0:0:1:0: tag#560 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 267.961798][ C0] sd 0:0:1:0: tag#560 CDB: opcode=0xe5 (vendor) [ 267.968049][ C0] sd 0:0:1:0: tag#560 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 267.976979][ C0] sd 0:0:1:0: tag#560 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 267.985934][ C0] sd 0:0:1:0: tag#560 CDB[20]: 80 19 [ 268.006218][T24503] loop3: detected capacity change from 0 to 1054 17:43:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3df, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x300, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 268.053006][T24503] EXT4-fs (loop3): inodes count not valid: 7 vs 32 17:43:38 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3c, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 268.114009][T24503] loop3: detected capacity change from 0 to 1054 [ 268.142861][T24503] EXT4-fs (loop3): inodes count not valid: 7 vs 32 17:43:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="090000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xeef70500, 0x0) close(r0) [ 268.193947][T24519] loop5: detected capacity change from 0 to 1054 17:43:38 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x72, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x402, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 268.248232][T24530] loop3: detected capacity change from 0 to 1054 [ 268.248510][T24519] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 268.278733][T24530] EXT4-fs (loop3): inodes count not valid: 9 vs 32 [ 268.339033][T24530] loop3: detected capacity change from 0 to 1054 [ 268.345823][T24519] EXT4-fs (loop5): orphan cleanup on readonly fs [ 268.352250][T24519] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 268.366862][T24519] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 268.377744][T24519] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 268.391842][T24519] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 268.398516][T24519] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 268.411993][T24530] EXT4-fs (loop3): inodes count not valid: 9 vs 32 17:43:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="0a0000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 268.513120][T24560] loop3: detected capacity change from 0 to 1054 [ 268.544235][T24560] EXT4-fs (loop3): inodes count not valid: 10 vs 32 17:43:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xf1ef0500, 0x0) close(r0) 17:43:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3e5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="210000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 268.605258][T24560] loop3: detected capacity change from 0 to 1054 [ 268.621892][T24560] EXT4-fs (loop3): inodes count not valid: 10 vs 32 17:43:40 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x73, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x406, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:40 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3d, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 268.722005][T24589] loop3: detected capacity change from 0 to 1054 [ 268.752912][T24588] loop5: detected capacity change from 0 to 1054 [ 268.780633][T24588] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 268.802798][T24589] loop3: detected capacity change from 0 to 1054 [ 268.821440][T24589] EXT4-fs (loop3): inodes count not valid: 33 vs 32 [ 268.829789][T24588] EXT4-fs (loop5): orphan cleanup on readonly fs [ 268.836165][T24588] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 268.849917][T24588] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 268.860795][T24588] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 17:43:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xf2270600, 0x0) close(r0) 17:43:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x408, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 268.875699][T24588] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 268.882379][T24588] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="250000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3e7, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 268.992248][T24615] loop3: detected capacity change from 0 to 1054 [ 269.026131][T24615] EXT4-fs (loop3): inodes count not valid: 37 vs 32 [ 269.082994][T24631] loop5: detected capacity change from 0 to 1054 [ 269.092191][T24631] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 269.107034][T24615] loop3: detected capacity change from 0 to 1054 [ 269.114374][T24631] EXT4-fs (loop5): orphan cleanup on readonly fs 17:43:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xf4ffffff, 0x0) close(r0) [ 269.120799][T24631] EXT4-fs error (device loop5): ext4_quota_enable:6304: comm syz-executor.5: inode #29187: comm syz-executor.5: iget: illegal inode # [ 269.134570][T24631] EXT4-fs error (device loop5): ext4_quota_enable:6306: comm syz-executor.5: Bad quota inode # 29187 [ 269.145525][T24631] EXT4-fs warning (device loop5): ext4_enable_quotas:6346: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 269.159592][T24631] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 269.166282][T24631] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:43:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="290000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 269.188275][T24615] EXT4-fs (loop3): inodes count not valid: 37 vs 32 17:43:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x500, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:40 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x74, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 269.254112][T24647] loop3: detected capacity change from 0 to 1054 [ 269.281422][T24647] EXT4-fs (loop3): inodes count not valid: 41 vs 32 17:43:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x2689, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:40 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x3e, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xf6e70500, 0x0) close(r0) [ 269.418320][T24647] loop3: detected capacity change from 0 to 1054 [ 269.429158][T24647] EXT4-fs (loop3): inodes count not valid: 41 vs 32 17:43:41 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x75, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="fe0000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 269.514001][T24667] loop5: detected capacity change from 0 to 264192 17:43:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 269.578844][T24667] EXT4-fs (loop5): Invalid log block size: 1048576 [ 269.590777][T24688] loop3: detected capacity change from 0 to 1054 17:43:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xf8d70500, 0x0) close(r0) [ 269.651159][T24688] EXT4-fs (loop3): inodes count not valid: 254 vs 32 17:43:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="002000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:41 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x54, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x820b, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:41 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x76, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 269.758216][T24710] loop3: detected capacity change from 0 to 1054 [ 269.781853][T24710] EXT4-fs (loop3): inodes count not valid: 8192 vs 32 [ 269.843744][T24710] loop3: detected capacity change from 0 to 1054 [ 269.863573][T24710] EXT4-fs (loop3): inodes count not valid: 8192 vs 32 17:43:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="feff00000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x604, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xf8df0500, 0x0) close(r0) 17:43:41 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x55, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 270.046235][T24741] loop3: detected capacity change from 0 to 1054 17:43:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x700, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 270.092256][T24741] EXT4-fs (loop3): inodes count not valid: 65534 vs 32 17:43:41 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x77, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 270.142730][T24741] loop3: detected capacity change from 0 to 1054 [ 270.156919][T24741] EXT4-fs (loop3): inodes count not valid: 65534 vs 32 17:43:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="feffffff0002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xfbffffff, 0x0) close(r0) [ 270.302517][T24774] loop3: detected capacity change from 0 to 1054 17:43:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200200000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 270.353557][T24719] loop5: detected capacity change from 0 to 264192 [ 270.378845][T24719] EXT4-fs (loop5): Invalid log block size: 1048576 [ 270.429630][T24793] loop3: detected capacity change from 0 to 1054 [ 270.471803][T24793] EXT4-fs (loop3): inodes count not valid: 544 vs 32 17:43:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xfffe, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:42 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x56, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:42 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x78, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xfe250600, 0x0) close(r0) 17:43:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200300000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 270.531104][T24793] loop3: detected capacity change from 0 to 1054 [ 270.541076][T24793] EXT4-fs (loop3): inodes count not valid: 544 vs 32 17:43:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 270.622002][T24821] loop3: detected capacity change from 0 to 1054 [ 270.659374][T24821] EXT4-fs (loop3): inodes count not valid: 800 vs 32 17:43:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200400000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 270.797703][T24840] loop3: detected capacity change from 0 to 1054 [ 270.827770][T24840] EXT4-fs (loop3): inodes count not valid: 1056 vs 32 [ 270.875074][ C0] scsi_io_completion_action: 11 callbacks suppressed [ 270.875124][ C0] sd 0:0:1:0: tag#566 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 270.891587][ C0] sd 0:0:1:0: tag#566 CDB: opcode=0xe5 (vendor) [ 270.897848][ C0] sd 0:0:1:0: tag#566 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 270.906810][ C0] sd 0:0:1:0: tag#566 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 270.915757][ C0] sd 0:0:1:0: tag#566 CDB[20]: 80 19 17:43:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xfe2e0600, 0x0) close(r0) 17:43:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200500000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 270.928984][T24840] loop3: detected capacity change from 0 to 1054 [ 270.936725][T24840] EXT4-fs (loop3): inodes count not valid: 1056 vs 32 17:43:42 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x79, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xa00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:42 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7a, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 271.052352][T24859] loop3: detected capacity change from 0 to 1054 [ 271.087273][T24859] EXT4-fs (loop3): inodes count not valid: 1312 vs 32 [ 271.095826][ C0] sd 0:0:1:0: tag#567 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 271.105582][ C0] sd 0:0:1:0: tag#567 CDB: opcode=0xe5 (vendor) [ 271.111833][ C0] sd 0:0:1:0: tag#567 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 271.120796][ C0] sd 0:0:1:0: tag#567 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 271.129737][ C0] sd 0:0:1:0: tag#567 CDB[20]: 80 19 [ 271.224691][ C0] sd 0:0:1:0: tag#514 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 271.234474][ C0] sd 0:0:1:0: tag#514 CDB: opcode=0xe5 (vendor) [ 271.240987][ C0] sd 0:0:1:0: tag#514 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 271.249970][ C0] sd 0:0:1:0: tag#514 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 271.259023][ C0] sd 0:0:1:0: tag#514 CDB[20]: 80 19 [ 271.394484][T24820] loop5: detected capacity change from 0 to 264192 [ 271.409924][T24820] EXT4-fs (loop5): Invalid log block size: 1048576 17:43:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x20000005, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200600000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xfecf0500, 0x0) close(r0) 17:43:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xb00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:43 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7a, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:43 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x7b, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 271.575797][T24897] loop3: detected capacity change from 0 to 1054 [ 271.597013][ C0] sd 0:0:1:0: tag#519 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 271.606798][ C0] sd 0:0:1:0: tag#519 CDB: opcode=0xe5 (vendor) [ 271.613038][ C0] sd 0:0:1:0: tag#519 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 271.622024][ C0] sd 0:0:1:0: tag#519 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 271.630992][ C0] sd 0:0:1:0: tag#519 CDB[20]: 80 19 [ 271.667208][T24897] EXT4-fs (loop3): inodes count not valid: 1568 vs 32 17:43:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 271.777395][T24897] loop3: detected capacity change from 0 to 1054 [ 271.792046][T24897] EXT4-fs (loop3): inodes count not valid: 1568 vs 32 17:43:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200700000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xfeffffff, 0x0) close(r0) [ 271.826509][ C1] sd 0:0:1:0: tag#450 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 271.836924][ C1] sd 0:0:1:0: tag#450 CDB: opcode=0xe5 (vendor) [ 271.843288][ C1] sd 0:0:1:0: tag#450 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 271.852247][ C1] sd 0:0:1:0: tag#450 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 271.861464][ C1] sd 0:0:1:0: tag#450 CDB[20]: 80 19 17:43:43 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7b, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:43 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x204, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 272.050982][T24934] loop3: detected capacity change from 0 to 1054 [ 272.073658][T24934] EXT4-fs (loop3): inodes count not valid: 1824 vs 32 [ 272.095900][ C0] sd 0:0:1:0: tag#529 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 272.105682][ C0] sd 0:0:1:0: tag#529 CDB: opcode=0xe5 (vendor) [ 272.111951][ C0] sd 0:0:1:0: tag#529 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 272.113609][T24934] loop3: detected capacity change from 0 to 1054 [ 272.120916][ C0] sd 0:0:1:0: tag#529 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 272.120933][ C0] sd 0:0:1:0: tag#529 CDB[20]: 80 19 [ 272.195958][T24934] EXT4-fs (loop3): inodes count not valid: 1824 vs 32 [ 272.223644][ C0] sd 0:0:1:0: tag#549 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 272.236553][ C0] sd 0:0:1:0: tag#549 CDB: opcode=0xe5 (vendor) 17:43:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff020000, 0x0) close(r0) [ 272.242817][ C0] sd 0:0:1:0: tag#549 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 272.251872][ C0] sd 0:0:1:0: tag#549 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 272.260915][ C0] sd 0:0:1:0: tag#549 CDB[20]: 80 19 17:43:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200800000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xfffffffe, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:44 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff050000, 0x0) close(r0) 17:43:44 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x90, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:44 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x300, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 272.597174][T24974] loop3: detected capacity change from 0 to 1054 [ 272.612476][ C1] sd 0:0:1:0: tag#486 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 272.622346][ C1] sd 0:0:1:0: tag#486 CDB: opcode=0xe5 (vendor) [ 272.628707][ C1] sd 0:0:1:0: tag#486 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 272.637710][ C1] sd 0:0:1:0: tag#486 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 272.646717][ C1] sd 0:0:1:0: tag#486 CDB[20]: 80 19 [ 272.665134][T24974] EXT4-fs (loop3): inodes count not valid: 2080 vs 32 17:43:44 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 272.725214][T24974] loop3: detected capacity change from 0 to 1054 [ 272.737788][T24974] EXT4-fs (loop3): inodes count not valid: 2080 vs 32 17:43:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200900000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:44 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xa0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff060000, 0x0) close(r0) [ 272.869690][T25004] loop3: detected capacity change from 0 to 1054 [ 272.874532][ C1] sd 0:0:1:0: tag#463 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 272.885773][ C1] sd 0:0:1:0: tag#463 CDB: opcode=0xe5 (vendor) [ 272.892030][ C1] sd 0:0:1:0: tag#463 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 272.901011][ C1] sd 0:0:1:0: tag#463 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 272.909970][ C1] sd 0:0:1:0: tag#463 CDB[20]: 80 19 [ 272.945544][T25004] EXT4-fs (loop3): inodes count not valid: 2336 vs 32 17:43:44 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 273.055729][T25004] loop3: detected capacity change from 0 to 1054 [ 273.067643][T25004] EXT4-fs (loop3): inodes count not valid: 2336 vs 32 17:43:44 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x402, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff0a0000, 0x0) close(r0) [ 273.198415][ C1] sd 0:0:1:0: tag#483 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 273.208212][ C1] sd 0:0:1:0: tag#483 CDB: opcode=0xe5 (vendor) [ 273.214826][ C1] sd 0:0:1:0: tag#483 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 273.223781][ C1] sd 0:0:1:0: tag#483 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 273.232719][ C1] sd 0:0:1:0: tag#483 CDB[20]: 80 19 17:43:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xfffffffffffffffe, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200a00000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:45 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xb0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff0b0000, 0x0) close(r0) 17:43:45 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1100, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 273.633870][T25055] loop3: detected capacity change from 0 to 1054 [ 273.679285][T25055] EXT4-fs (loop3): inodes count not valid: 2592 vs 32 17:43:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff0c0000, 0x0) close(r0) [ 273.755338][T25055] loop3: detected capacity change from 0 to 1054 [ 273.765925][T25055] EXT4-fs (loop3): inodes count not valid: 2592 vs 32 17:43:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200b00000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:45 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:45 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1200, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff0d0000, 0x0) close(r0) [ 273.936245][T25083] loop3: detected capacity change from 0 to 1054 [ 273.971297][T25083] EXT4-fs (loop3): inodes count not valid: 2848 vs 32 17:43:45 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x406, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:45 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 274.054233][T25083] loop3: detected capacity change from 0 to 1054 [ 274.079582][T25083] EXT4-fs (loop3): inodes count not valid: 2848 vs 32 17:43:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200c00000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff0f0000, 0x0) close(r0) 17:43:45 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1300, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:45 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x500, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:45 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 274.630954][T25131] loop3: detected capacity change from 0 to 1054 [ 274.655868][T25131] EXT4-fs (loop3): inodes count not valid: 3104 vs 32 [ 274.749871][T25131] loop3: detected capacity change from 0 to 1054 [ 274.762884][T25131] EXT4-fs (loop3): inodes count not valid: 3104 vs 32 17:43:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200d00000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff150000, 0x0) close(r0) 17:43:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1400, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 274.891869][T25159] loop3: detected capacity change from 0 to 1054 [ 274.902210][T25159] EXT4-fs (loop3): inodes count not valid: 3360 vs 32 17:43:46 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x600, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:46 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xec, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 274.947354][T25159] loop3: detected capacity change from 0 to 1054 [ 274.966616][T25159] EXT4-fs (loop3): inodes count not valid: 3360 vs 32 17:43:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200e00000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 275.097650][T25184] loop3: detected capacity change from 0 to 1054 [ 275.132085][T25184] EXT4-fs (loop3): inodes count not valid: 3616 vs 32 [ 275.211606][T25184] loop3: detected capacity change from 0 to 1054 [ 275.223507][T25184] EXT4-fs (loop3): inodes count not valid: 3616 vs 32 17:43:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="020000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1500, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff150600, 0x0) close(r0) 17:43:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200f00000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:46 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 275.662398][T25214] loop3: detected capacity change from 0 to 1054 [ 275.673288][T25217] loop5: detected capacity change from 0 to 1054 [ 275.685935][T25214] EXT4-fs (loop3): inodes count not valid: 3872 vs 32 17:43:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="201000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 275.724425][T25217] EXT4-fs (loop5): inodes count not valid: 2 vs 32 [ 275.788398][T25230] loop3: detected capacity change from 0 to 1054 [ 275.819380][T25217] loop5: detected capacity change from 0 to 1054 17:43:47 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 275.837729][T25230] EXT4-fs (loop3): inodes count not valid: 4128 vs 32 [ 275.842390][T25217] EXT4-fs (loop5): inodes count not valid: 2 vs 32 17:43:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff170000, 0x0) close(r0) 17:43:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="201100000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 275.999785][T25256] loop3: detected capacity change from 0 to 1054 [ 276.010382][T25256] EXT4-fs (loop3): inodes count not valid: 4384 vs 32 [ 276.057564][T25256] loop3: detected capacity change from 0 to 1054 [ 276.066532][T25256] EXT4-fs (loop3): inodes count not valid: 4384 vs 32 17:43:47 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1700, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="040000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:47 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x204, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:47 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x604, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="201200000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff190000, 0x0) close(r0) [ 276.205761][T25277] loop5: detected capacity change from 0 to 1054 [ 276.213317][ C0] scsi_io_completion_action: 7 callbacks suppressed [ 276.213344][ C0] sd 0:0:1:0: tag#501 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.220216][T25282] loop3: detected capacity change from 0 to 1054 [ 276.229693][ C0] sd 0:0:1:0: tag#501 CDB: opcode=0xe5 (vendor) [ 276.242328][ C0] sd 0:0:1:0: tag#501 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 276.251465][ C0] sd 0:0:1:0: tag#501 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 276.260442][ C0] sd 0:0:1:0: tag#501 CDB[20]: 80 19 [ 276.270964][T25277] EXT4-fs (loop5): inodes count not valid: 4 vs 32 [ 276.413387][T25282] EXT4-fs (loop3): inodes count not valid: 4640 vs 32 [ 276.442702][T25277] loop5: detected capacity change from 0 to 1054 17:43:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="202200000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 276.467390][T25277] EXT4-fs (loop5): inodes count not valid: 4 vs 32 17:43:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="070000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 276.524423][T25301] loop3: detected capacity change from 0 to 1054 [ 276.555276][T25301] EXT4-fs (loop3): inodes count not valid: 8736 vs 32 17:43:47 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1800, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 276.603941][T25308] loop5: detected capacity change from 0 to 1054 [ 276.636379][T25301] loop3: detected capacity change from 0 to 1054 [ 276.648385][ C0] sd 0:0:1:0: tag#461 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.658221][ C0] sd 0:0:1:0: tag#461 CDB: opcode=0xe5 (vendor) [ 276.664461][ C0] sd 0:0:1:0: tag#461 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 276.673450][ C0] sd 0:0:1:0: tag#461 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 276.682423][ C0] sd 0:0:1:0: tag#461 CDB[20]: 80 19 17:43:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff1b0000, 0x0) close(r0) [ 276.704806][T25301] EXT4-fs (loop3): inodes count not valid: 8736 vs 32 17:43:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="202500000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 276.776471][T25308] EXT4-fs (loop5): inodes count not valid: 7 vs 32 17:43:48 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x700, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:48 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x300, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:48 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1900, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 276.828937][T25308] loop5: detected capacity change from 0 to 1054 [ 276.840141][T25334] loop3: detected capacity change from 0 to 1054 [ 276.857565][ C0] sd 0:0:1:0: tag#500 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.867320][ C0] sd 0:0:1:0: tag#500 CDB: opcode=0xe5 (vendor) 17:43:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="080000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 276.873585][ C0] sd 0:0:1:0: tag#500 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 276.882549][ C0] sd 0:0:1:0: tag#500 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 276.891501][ C0] sd 0:0:1:0: tag#500 CDB[20]: 80 19 [ 276.896992][T25334] EXT4-fs (loop3): inodes count not valid: 9504 vs 32 [ 276.914154][T25308] EXT4-fs (loop5): inodes count not valid: 7 vs 32 17:43:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff230600, 0x0) close(r0) [ 276.987037][T25334] loop3: detected capacity change from 0 to 1054 [ 277.006773][T25334] EXT4-fs (loop3): inodes count not valid: 9504 vs 32 17:43:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="202e00000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 277.039909][T25362] loop5: detected capacity change from 0 to 1054 [ 277.069289][T25362] EXT4-fs (loop5): inodes count not valid: 8 vs 32 [ 277.136102][T25375] loop3: detected capacity change from 0 to 1054 [ 277.144787][T25362] loop5: detected capacity change from 0 to 1054 [ 277.153401][T25362] EXT4-fs (loop5): inodes count not valid: 8 vs 32 [ 277.172808][T25375] EXT4-fs (loop3): inodes count not valid: 11808 vs 32 17:43:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="090000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 277.228316][T25375] loop3: detected capacity change from 0 to 1054 [ 277.243475][T25375] EXT4-fs (loop3): inodes count not valid: 11808 vs 32 17:43:48 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1a00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="204800000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 277.279675][T25394] loop5: detected capacity change from 0 to 1054 17:43:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff2b0000, 0x0) close(r0) [ 277.349171][T25394] EXT4-fs (loop5): inodes count not valid: 9 vs 32 [ 277.381522][T25405] loop3: detected capacity change from 0 to 1054 17:43:48 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1b00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 277.416702][T25394] loop5: detected capacity change from 0 to 1054 [ 277.428068][T25405] EXT4-fs (loop3): inodes count not valid: 18464 vs 32 [ 277.447483][T25394] EXT4-fs (loop5): inodes count not valid: 9 vs 32 [ 277.483624][T25405] loop3: detected capacity change from 0 to 1054 [ 277.502725][T25405] EXT4-fs (loop3): inodes count not valid: 18464 vs 32 [ 277.504395][ C0] sd 0:0:1:0: tag#457 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 277.519438][ C0] sd 0:0:1:0: tag#457 CDB: opcode=0xe5 (vendor) [ 277.525708][ C0] sd 0:0:1:0: tag#457 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 277.534677][ C0] sd 0:0:1:0: tag#457 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 277.543739][ C0] sd 0:0:1:0: tag#457 CDB[20]: 80 19 17:43:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="0a0000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:48 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x900, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="204c00000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:48 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x402, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff2f0000, 0x0) close(r0) [ 277.705202][T25437] loop5: detected capacity change from 0 to 1054 [ 277.733069][T25443] loop3: detected capacity change from 0 to 1054 17:43:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="0b0000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 277.748899][ C0] sd 0:0:1:0: tag#455 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 277.758683][ C0] sd 0:0:1:0: tag#455 CDB: opcode=0xe5 (vendor) [ 277.764923][ C0] sd 0:0:1:0: tag#455 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 277.774003][ C0] sd 0:0:1:0: tag#455 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 277.783227][ C0] sd 0:0:1:0: tag#455 CDB[20]: 80 19 [ 277.790240][T25443] EXT4-fs (loop3): inodes count not valid: 19488 vs 32 [ 277.874195][ C0] sd 0:0:1:0: tag#493 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 277.883991][ C0] sd 0:0:1:0: tag#493 CDB: opcode=0xe5 (vendor) [ 277.890761][ C0] sd 0:0:1:0: tag#493 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 277.899736][ C0] sd 0:0:1:0: tag#493 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 277.908695][ C0] sd 0:0:1:0: tag#493 CDB[20]: 80 19 17:43:49 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1c00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff330000, 0x0) close(r0) [ 277.940396][T25443] loop3: detected capacity change from 0 to 1054 [ 277.959238][T25443] EXT4-fs (loop3): inodes count not valid: 19488 vs 32 [ 277.983941][T25465] loop5: detected capacity change from 0 to 1054 17:43:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="206000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:49 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x406, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:49 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xa00, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 278.012279][T25465] EXT4-fs (loop5): inodes count not valid: 11 vs 32 [ 278.039840][T25465] loop5: detected capacity change from 0 to 1054 17:43:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="0f0000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 278.061719][T25465] EXT4-fs (loop5): inodes count not valid: 11 vs 32 [ 278.131321][T25490] loop3: detected capacity change from 0 to 1054 [ 278.137963][ C1] sd 0:0:1:0: tag#455 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 278.147721][ C1] sd 0:0:1:0: tag#455 CDB: opcode=0xe5 (vendor) [ 278.153985][ C1] sd 0:0:1:0: tag#455 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 278.162990][ C1] sd 0:0:1:0: tag#455 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 278.168558][T25490] EXT4-fs (loop3): inodes count not valid: 24608 vs 32 [ 278.172027][ C1] sd 0:0:1:0: tag#455 CDB[20]: 80 19 [ 278.191859][T25493] loop5: detected capacity change from 0 to 1054 17:43:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff370000, 0x0) close(r0) [ 278.267889][ C1] sd 0:0:1:0: tag#507 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 278.277653][ C1] sd 0:0:1:0: tag#507 CDB: opcode=0xe5 (vendor) [ 278.283921][ C1] sd 0:0:1:0: tag#507 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 278.292851][ C1] sd 0:0:1:0: tag#507 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 278.296215][T25493] EXT4-fs (loop5): inodes count not valid: 15 vs 32 [ 278.301897][ C1] sd 0:0:1:0: tag#507 CDB[20]: 80 19 [ 278.338535][T25490] loop3: detected capacity change from 0 to 1054 [ 278.353956][T25493] loop5: detected capacity change from 0 to 1054 [ 278.364232][T25490] EXT4-fs (loop3): inodes count not valid: 24608 vs 32 [ 278.365373][T25493] EXT4-fs (loop5): inodes count not valid: 15 vs 32 17:43:49 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1d00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="206800000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="120000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:49 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xb00, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 278.489659][T25531] loop3: detected capacity change from 0 to 1054 [ 278.504683][T25535] loop5: detected capacity change from 0 to 1054 [ 278.528007][T25531] EXT4-fs (loop3): inodes count not valid: 26656 vs 32 [ 278.545066][T25535] EXT4-fs (loop5): inodes count not valid: 18 vs 32 [ 278.575114][ C1] sd 0:0:1:0: tag#489 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 278.585111][ C1] sd 0:0:1:0: tag#489 CDB: opcode=0xe5 (vendor) 17:43:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff570000, 0x0) close(r0) [ 278.591637][ C1] sd 0:0:1:0: tag#489 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 278.600595][ C1] sd 0:0:1:0: tag#489 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 278.609545][ C1] sd 0:0:1:0: tag#489 CDB[20]: 80 19 17:43:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1e00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 278.712473][T25531] loop3: detected capacity change from 0 to 1054 [ 278.721124][T25535] loop5: detected capacity change from 0 to 1054 [ 278.730668][T25531] EXT4-fs (loop3): inodes count not valid: 26656 vs 32 [ 278.736570][T25535] EXT4-fs (loop5): inodes count not valid: 18 vs 32 17:43:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="130000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="206c00000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 278.809143][ C0] sd 0:0:1:0: tag#471 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 278.818988][ C0] sd 0:0:1:0: tag#471 CDB: opcode=0xe5 (vendor) [ 278.825254][ C0] sd 0:0:1:0: tag#471 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 278.834199][ C0] sd 0:0:1:0: tag#471 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 278.843149][ C0] sd 0:0:1:0: tag#471 CDB[20]: 80 19 [ 278.917840][T25576] loop3: detected capacity change from 0 to 1054 [ 278.931471][T25577] loop5: detected capacity change from 0 to 1054 [ 278.943373][T25576] EXT4-fs (loop3): inodes count not valid: 27680 vs 32 [ 278.951449][T25577] EXT4-fs (loop5): inodes count not valid: 19 vs 32 [ 278.972556][T25576] loop3: detected capacity change from 0 to 1054 [ 278.988284][T25576] EXT4-fs (loop3): inodes count not valid: 27680 vs 32 17:43:50 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x408, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff5f0000, 0x0) close(r0) 17:43:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="207400000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:50 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xc00, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 279.015511][T25577] loop5: detected capacity change from 0 to 1054 [ 279.042362][T25577] EXT4-fs (loop5): inodes count not valid: 19 vs 32 17:43:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="140000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 279.099055][T25606] loop3: detected capacity change from 0 to 1054 [ 279.136882][T25606] EXT4-fs (loop3): inodes count not valid: 29728 vs 32 [ 279.199486][T25614] loop5: detected capacity change from 0 to 1054 [ 279.220296][T25606] loop3: detected capacity change from 0 to 1054 [ 279.238820][T25614] EXT4-fs (loop5): inodes count not valid: 20 vs 32 [ 279.245947][T25606] EXT4-fs (loop3): inodes count not valid: 29728 vs 32 17:43:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1f00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 279.292295][T25614] loop5: detected capacity change from 0 to 1054 [ 279.308840][T25614] EXT4-fs (loop5): inodes count not valid: 20 vs 32 17:43:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff670000, 0x0) close(r0) 17:43:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="207a00000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="150000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:50 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x500, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:50 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xd00, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 279.454713][T25649] loop3: detected capacity change from 0 to 1054 [ 279.466423][T25653] loop5: detected capacity change from 0 to 1054 [ 279.485811][T25649] EXT4-fs (loop3): inodes count not valid: 31264 vs 32 [ 279.494344][T25653] EXT4-fs (loop5): inodes count not valid: 21 vs 32 [ 279.574340][T25649] loop3: detected capacity change from 0 to 1054 [ 279.583706][T25653] loop5: detected capacity change from 0 to 1054 [ 279.590252][T25649] EXT4-fs (loop3): inodes count not valid: 31264 vs 32 [ 279.599064][T25653] EXT4-fs (loop5): inodes count not valid: 21 vs 32 17:43:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="208300000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="160000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff6f0000, 0x0) close(r0) [ 279.725414][T25690] loop3: detected capacity change from 0 to 1054 [ 279.752284][T25694] loop5: detected capacity change from 0 to 1054 17:43:51 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 279.773398][T25690] EXT4-fs (loop3): inodes count not valid: 33568 vs 32 [ 279.782504][T25694] EXT4-fs (loop5): inodes count not valid: 22 vs 32 17:43:51 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xe00, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="20fe00000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 279.842629][T25694] loop5: detected capacity change from 0 to 1054 [ 279.893783][T25694] EXT4-fs (loop5): inodes count not valid: 22 vs 32 [ 279.911492][T25721] loop3: detected capacity change from 0 to 1054 17:43:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="170000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xff7f0000, 0x0) close(r0) [ 279.951796][T25721] EXT4-fs (loop3): inodes count not valid: 65056 vs 32 17:43:51 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2100, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 279.992548][T25732] loop5: detected capacity change from 0 to 1054 [ 280.003249][T25732] EXT4-fs (loop5): inodes count not valid: 23 vs 32 [ 280.036310][T25721] loop3: detected capacity change from 0 to 1054 [ 280.055838][T25721] EXT4-fs (loop3): inodes count not valid: 65056 vs 32 17:43:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="209001000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:51 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0xf00, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:51 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x604, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 280.091089][T25732] loop5: detected capacity change from 0 to 1054 [ 280.106828][T25732] EXT4-fs (loop5): inodes count not valid: 23 vs 32 17:43:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="180000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 280.160190][T25764] loop3: detected capacity change from 0 to 1054 [ 280.201680][T25764] EXT4-fs (loop3): inodes count not valid: 102432 vs 32 17:43:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xffffff7f, 0x0) close(r0) 17:43:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="20f001000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 280.245409][T25773] loop5: detected capacity change from 0 to 1054 [ 280.282158][T25773] EXT4-fs (loop5): inodes count not valid: 24 vs 32 17:43:51 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2200, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="20f101000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 280.320757][T25786] loop3: detected capacity change from 0 to 1054 [ 280.331256][T25786] EXT4-fs (loop3): inodes count not valid: 127008 vs 32 [ 280.347043][T25773] loop5: detected capacity change from 0 to 1054 [ 280.363206][T25773] EXT4-fs (loop5): inodes count not valid: 24 vs 32 17:43:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="190000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:51 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1100, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 280.400804][T25802] loop3: detected capacity change from 0 to 1054 17:43:51 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x700, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 280.449817][T25802] EXT4-fs (loop3): inodes count not valid: 127264 vs 32 17:43:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="20f201000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 280.494121][T25816] loop5: detected capacity change from 0 to 1054 [ 280.513887][T25816] EXT4-fs (loop5): inodes count not valid: 25 vs 32 17:43:51 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2300, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 280.575422][T25816] loop5: detected capacity change from 0 to 1054 [ 280.590996][T25816] EXT4-fs (loop5): inodes count not valid: 25 vs 32 17:43:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xfffffff4, 0x0) close(r0) 17:43:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="1a0000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 280.621571][T25825] loop3: detected capacity change from 0 to 1054 17:43:51 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2400, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 280.687154][T25825] EXT4-fs (loop3): inodes count not valid: 127520 vs 32 [ 280.722914][T25849] loop5: detected capacity change from 0 to 1054 17:43:52 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1200, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 280.743083][T25849] EXT4-fs (loop5): inodes count not valid: 26 vs 32 [ 280.768600][T25825] loop3: detected capacity change from 0 to 1054 [ 280.778461][T25825] EXT4-fs (loop3): inodes count not valid: 127520 vs 32 17:43:52 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="1b0000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2500, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xfffffffb, 0x0) close(r0) 17:43:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200402000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 280.873860][T25870] loop5: detected capacity change from 0 to 1054 [ 280.917113][T25870] EXT4-fs (loop5): inodes count not valid: 27 vs 32 [ 280.955289][T25883] loop3: detected capacity change from 0 to 1054 [ 281.003200][T25883] EXT4-fs (loop3): inodes count not valid: 132128 vs 32 [ 281.017538][T25870] loop5: detected capacity change from 0 to 1054 [ 281.047307][T25870] EXT4-fs (loop5): inodes count not valid: 27 vs 32 [ 281.083105][T25883] loop3: detected capacity change from 0 to 1054 17:43:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="1c0000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xfffffffe, 0x0) close(r0) [ 281.107959][T25883] EXT4-fs (loop3): inodes count not valid: 132128 vs 32 17:43:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200d02000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:52 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1300, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 281.192039][T25911] loop5: detected capacity change from 0 to 1054 [ 281.209693][T25911] EXT4-fs (loop5): inodes count not valid: 28 vs 32 17:43:52 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 281.249836][T25920] loop3: detected capacity change from 0 to 1054 [ 281.259651][T25911] loop5: detected capacity change from 0 to 1054 [ 281.282043][T25920] EXT4-fs (loop3): inodes count not valid: 134432 vs 32 [ 281.312563][T25911] EXT4-fs (loop5): inodes count not valid: 28 vs 32 17:43:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0xffffffff, 0x0) close(r0) 17:43:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="210000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2700, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 281.395878][T25920] loop3: detected capacity change from 0 to 1054 [ 281.404031][T25920] EXT4-fs (loop3): inodes count not valid: 134432 vs 32 17:43:52 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1400, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 17:43:52 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xa00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 281.467236][T25959] loop5: detected capacity change from 0 to 1054 17:43:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200e02000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 281.519592][T25959] EXT4-fs (loop5): inodes count not valid: 33 vs 32 [ 281.553812][ C1] scsi_io_completion_action: 14 callbacks suppressed [ 281.553844][ C1] sd 0:0:1:0: tag#452 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.570365][ C1] sd 0:0:1:0: tag#452 CDB: opcode=0xe5 (vendor) [ 281.576719][ C1] sd 0:0:1:0: tag#452 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 281.585672][ C1] sd 0:0:1:0: tag#452 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 281.594623][ C1] sd 0:0:1:0: tag#452 CDB[20]: 80 19 [ 281.618139][T25977] loop3: detected capacity change from 0 to 1054 [ 281.628202][T25977] EXT4-fs (loop3): inodes count not valid: 134688 vs 32 [ 281.644994][ C1] sd 0:0:1:0: tag#500 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.654770][ C1] sd 0:0:1:0: tag#500 CDB: opcode=0xe5 (vendor) [ 281.656932][T25959] loop5: detected capacity change from 0 to 1054 17:43:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x0, 0x0) close(r0) [ 281.661025][ C1] sd 0:0:1:0: tag#500 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 281.661046][ C1] sd 0:0:1:0: tag#500 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 281.685435][ C1] sd 0:0:1:0: tag#500 CDB[20]: 80 19 17:43:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200f02000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="250000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) [ 281.727633][T25959] EXT4-fs (loop5): inodes count not valid: 33 vs 32 17:43:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2800, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 17:43:52 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xb00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:52 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, 0x4c, 0x7fff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x1500, 0x100000fe) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 281.768780][T25996] loop3: detected capacity change from 0 to 1054 [ 281.787501][T25996] EXT4-fs (loop3): inodes count not valid: 134944 vs 32 17:43:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="206f02000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 281.833116][T26007] loop5: detected capacity change from 0 to 1054 [ 281.879350][T26007] EXT4-fs (loop5): inodes count not valid: 37 vs 32 [ 281.908742][ C0] sd 0:0:1:0: tag#478 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.918509][ C0] sd 0:0:1:0: tag#478 CDB: opcode=0xe5 (vendor) 17:43:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x0, 0x2) close(r0) [ 281.924792][ C0] sd 0:0:1:0: tag#478 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 281.933771][ C0] sd 0:0:1:0: tag#478 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 281.942844][ C0] sd 0:0:1:0: tag#478 CDB[20]: 80 19 [ 281.970889][T26024] loop3: detected capacity change from 0 to 1054 [ 282.002088][T26024] EXT4-fs (loop3): inodes count not valid: 159520 vs 32 17:43:53 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:43:53 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2900, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 282.042694][T26024] loop3: detected capacity change from 0 to 1054 [ 282.054081][T26007] loop5: detected capacity change from 0 to 1054 [ 282.054725][T26024] EXT4-fs (loop3): inodes count not valid: 159520 vs 32 [ 282.080049][T26007] EXT4-fs (loop5): inodes count not valid: 37 vs 32 17:43:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="290000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372", 0x2, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)) 17:43:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200003000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="0372cd02970ca1c72470d7401b665a25d85a3831a0046b5134827b148852aba8b4c572c4d04d002ff6f87f53287514179e2dc9d8edadebe02d", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 17:43:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}], 0x1, 0x0, 0x3) close(r0) [ 282.192601][ C1] sd 0:0:1:0: tag#496 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 282.202486][ C1] sd 0:0:1:0: tag#496 CDB: opcode=0xe5 (vendor) [ 282.208731][ C1] sd 0:0:1:0: tag#496 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 282.217709][ C1] sd 0:0:1:0: tag#496 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 282.217865][T26061] loop5: detected capacity change from 0 to 1054 [ 282.226659][ C1] sd 0:0:1:0: tag#496 CDB[20]: 80 19 [ 282.276328][T26061] EXT4-fs (loop5): inodes count not valid: 41 vs 32 [ 282.293726][T26070] loop3: detected capacity change from 0 to 1054 [ 282.319550][T26070] EXT4-fs (loop3): inodes count not valid: 196640 vs 32 [ 282.344548][T26043] ==================================================================