99.979870][T14511] RDX: 0000000000000000 RSI: 0000000000004f96 RDI: 0000000000000003 08:14:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000ae0002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) [ 399.987861][T14511] RBP: 00007f629550a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 399.995834][T14511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.003789][T14511] R13: 00007ffc8778bf9f R14: 00007f629550a300 R15: 0000000000022000 08:14:27 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x1000000, 0x0, 0x0, 0x0) 08:14:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x6000000000000000, 0x100000001000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 400.038667][ C0] sd 0:0:1:0: [sg0] tag#5289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 400.049381][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB: opcode=0xe5 (vendor) [ 400.056268][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 400.065828][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 400.075478][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[20]: ba 08:14:27 executing program 1 (fault-call:7 fault-nth:29): r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:27 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x6800000000000000, 0x100000001000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:27 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x2000000, 0x0, 0x0, 0x0) 08:14:27 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 400.147014][T14552] loop4: detected capacity change from 0 to 4 [ 400.172230][T14552] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 400.227284][T14570] FAULT_INJECTION: forcing a failure. [ 400.227284][T14570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.232223][T14552] loop4: detected capacity change from 0 to 4 [ 400.240416][T14570] CPU: 0 PID: 14570 Comm: syz-executor.1 Tainted: G W 5.14.0-rc7-syzkaller #0 [ 400.240441][T14570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.266720][T14570] Call Trace: [ 400.269995][T14570] dump_stack_lvl+0xb7/0x103 [ 400.274598][T14570] dump_stack+0x11/0x1a [ 400.278748][T14570] should_fail+0x23c/0x250 [ 400.283226][T14570] should_fail_usercopy+0x16/0x20 [ 400.288249][T14570] _copy_from_user+0x1c/0xd0 [ 400.292957][T14570] __copy_msghdr_from_user+0x44/0x350 [ 400.298349][T14570] ? unix_seqpacket_sendmsg+0xcc/0x110 [ 400.303799][T14570] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 400.309596][T14570] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 400.315774][T14570] sendmsg_copy_msghdr+0x4f/0xf0 [ 400.320706][T14570] ? __tsan_unaligned_write4+0x15f/0x190 [ 400.327046][T14570] io_issue_sqe+0x224c/0x64b0 [ 400.331786][T14570] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 400.338023][T14570] ? avc_has_perm+0x59/0x150 [ 400.342699][T14570] ? avc_has_perm+0xc8/0x150 [ 400.347346][T14570] ? perf_output_begin_forward+0x606/0x720 [ 400.353145][T14570] ? __fsnotify_parent+0x32f/0x430 [ 400.358317][T14570] ? __perf_event_header__init_id+0x28b/0x2d0 [ 400.364372][T14570] ? perf_prepare_sample+0xfc5/0x1080 [ 400.369768][T14570] ? asm_sysvec_apic_timer_interrupt+0x13/0x20 [ 400.375963][T14570] ? kcsan_setup_watchpoint+0x8b/0x3e0 [ 400.381414][T14570] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 400.386971][T14570] __io_queue_sqe+0xe7/0x360 [ 400.391568][T14570] io_submit_sqe+0x1695/0x3400 [ 400.396385][T14570] ? kmem_cache_alloc_bulk+0x289/0x340 [ 400.401877][T14570] io_submit_sqes+0x822/0xe50 [ 400.406543][T14570] __se_sys_io_uring_enter+0x213/0xae0 [ 400.412029][T14570] ? perf_trace_sys_enter+0x4d/0x2c0 [ 400.417300][T14570] ? fput+0x2d/0x130 [ 400.421237][T14570] __x64_sys_io_uring_enter+0x74/0x80 [ 400.426738][T14570] do_syscall_64+0x3d/0x90 [ 400.431229][T14570] ? irqentry_exit+0xe/0x30 [ 400.435730][T14570] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 400.441627][T14570] RIP: 0033:0x4665f9 [ 400.445506][T14570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 400.465109][T14570] RSP: 002b:00007f629550a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 08:14:27 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x3000000, 0x0, 0x0, 0x0) 08:14:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x6c00000000000000, 0x100000001000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 400.473606][T14570] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 400.481665][T14570] RDX: 0000000000000000 RSI: 0000000000004f96 RDI: 0000000000000003 [ 400.489623][T14570] RBP: 00007f629550a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 400.497674][T14570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.505641][T14570] R13: 00007ffc8778bf9f R14: 00007f629550a300 R15: 0000000000022000 08:14:27 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:27 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 400.532451][ C0] sd 0:0:1:0: [sg0] tag#5297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 400.542871][ C0] sd 0:0:1:0: [sg0] tag#5297 CDB: opcode=0xe5 (vendor) [ 400.549767][ C0] sd 0:0:1:0: [sg0] tag#5297 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 400.555865][T14552] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 400.559437][ C0] sd 0:0:1:0: [sg0] tag#5297 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 400.575018][ C0] sd 0:0:1:0: [sg0] tag#5297 CDB[20]: ba 08:14:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000af0002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:27 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x7400000000000000, 0x100000001000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 400.656585][ C1] sd 0:0:1:0: [sg0] tag#5298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 400.667230][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB: opcode=0xe5 (vendor) [ 400.674218][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 400.683779][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 400.693505][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[20]: ba 08:14:27 executing program 1 (fault-call:7 fault-nth:30): r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:27 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x4000000, 0x0, 0x0, 0x0) 08:14:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x7a00000000000000, 0x100000001000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:27 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:27 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 400.728123][T14605] loop4: detected capacity change from 0 to 4 [ 400.755870][T14605] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 400.792738][T14617] FAULT_INJECTION: forcing a failure. [ 400.792738][T14617] name failslab, interval 1, probability 0, space 0, times 0 [ 400.805536][T14617] CPU: 1 PID: 14617 Comm: syz-executor.1 Tainted: G W 5.14.0-rc7-syzkaller #0 [ 400.815763][T14617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.825900][T14617] Call Trace: [ 400.829171][T14617] dump_stack_lvl+0xb7/0x103 [ 400.833769][T14617] dump_stack+0x11/0x1a [ 400.837920][T14617] should_fail+0x23c/0x250 [ 400.842346][T14617] __should_failslab+0x81/0x90 [ 400.847095][T14617] should_failslab+0x5/0x20 [ 400.851653][T14617] kmem_cache_alloc_node+0x58/0x2b0 [ 400.856844][T14617] ? __alloc_skb+0xed/0x420 [ 400.861509][T14617] __alloc_skb+0xed/0x420 [ 400.865912][T14617] alloc_skb_with_frags+0x90/0x390 [ 400.871017][T14617] sock_alloc_send_pskb+0x436/0x4e0 [ 400.876248][T14617] unix_dgram_sendmsg+0x478/0x1600 [ 400.881391][T14617] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 400.887534][T14617] ? iovec_from_user+0x5d/0x2d0 [ 400.892378][T14617] unix_seqpacket_sendmsg+0xcc/0x110 [ 400.897652][T14617] ? unix_dgram_peer_wake_me+0x310/0x310 [ 400.903271][T14617] ____sys_sendmsg+0x360/0x4d0 [ 400.908036][T14617] ? sendmsg_copy_msghdr+0xc4/0xf0 [ 400.913230][T14617] __sys_sendmsg_sock+0x25/0x30 [ 400.918681][T14617] io_issue_sqe+0x206d/0x64b0 [ 400.923448][T14617] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 400.928980][T14617] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 400.934779][T14617] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 400.940989][T14617] ? perf_output_begin_forward+0x606/0x720 [ 400.947054][T14617] ? __perf_event_header__init_id+0x28b/0x2d0 [ 400.953188][T14617] ? perf_prepare_sample+0xfc5/0x1080 [ 400.958611][T14617] ? __perf_event_account_interrupt+0x115/0x1e0 [ 400.964962][T14617] ? hrtimer_forward+0x161/0x250 [ 400.969909][T14617] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 400.975711][T14617] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 400.987074][T14617] __io_queue_sqe+0xe7/0x360 [ 400.991756][T14617] io_submit_sqe+0x1695/0x3400 [ 400.996522][T14617] io_submit_sqes+0x822/0xe50 [ 401.001217][T14617] __se_sys_io_uring_enter+0x213/0xae0 [ 401.006748][T14617] ? ksys_write+0xdb/0x180 [ 401.011245][T14617] ? perf_trace_sys_enter+0x4d/0x2c0 [ 401.016551][T14617] ? fput+0x2d/0x130 [ 401.020433][T14617] __x64_sys_io_uring_enter+0x74/0x80 [ 401.025976][T14617] do_syscall_64+0x3d/0x90 [ 401.030380][T14617] ? irqentry_exit+0xe/0x30 [ 401.034916][T14617] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 401.040896][T14617] RIP: 0033:0x4665f9 [ 401.044839][T14617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 401.064691][T14617] RSP: 002b:00007f629550a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 401.073316][T14617] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 401.081284][T14617] RDX: 0000000000000000 RSI: 0000000000004f96 RDI: 0000000000000003 08:14:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x8000000000000000, 0x100000001000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:28 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:28 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:28 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x5000000, 0x0, 0x0, 0x0) [ 401.089259][T14617] RBP: 00007f629550a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 401.097306][T14617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.105264][T14617] R13: 00007ffc8778bf9f R14: 00007f629550a300 R15: 0000000000022000 08:14:28 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x6000000, 0x0, 0x0, 0x0) 08:14:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000fe0002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x8716000000000000, 0x100000001000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:28 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:28 executing program 1 (fault-call:7 fault-nth:31): r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:28 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) [ 401.230515][T14605] loop4: detected capacity change from 0 to 4 [ 401.237560][T14605] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:28 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 08:14:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0xeaffffff00000000, 0x100000001000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 401.314805][T14655] loop4: detected capacity change from 0 to 4 [ 401.316755][T14653] FAULT_INJECTION: forcing a failure. [ 401.316755][T14653] name failslab, interval 1, probability 0, space 0, times 0 [ 401.333800][T14653] CPU: 1 PID: 14653 Comm: syz-executor.1 Tainted: G W 5.14.0-rc7-syzkaller #0 [ 401.344035][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.354125][T14653] Call Trace: [ 401.357401][T14653] dump_stack_lvl+0xb7/0x103 [ 401.361986][T14653] dump_stack+0x11/0x1a [ 401.366180][T14653] should_fail+0x23c/0x250 [ 401.370668][T14653] __should_failslab+0x81/0x90 [ 401.375424][T14653] should_failslab+0x5/0x20 [ 401.380097][T14653] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 401.385836][T14653] ? __kmalloc_node_track_caller+0x30/0x40 [ 401.391695][T14653] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 401.397207][T14653] __kmalloc_node_track_caller+0x30/0x40 [ 401.402831][T14653] ? alloc_skb_with_frags+0x90/0x390 [ 401.408175][T14653] __alloc_skb+0x187/0x420 [ 401.412641][T14653] alloc_skb_with_frags+0x90/0x390 [ 401.417748][T14653] sock_alloc_send_pskb+0x436/0x4e0 [ 401.422946][T14653] unix_dgram_sendmsg+0x478/0x1600 [ 401.428059][T14653] ? iovec_from_user+0x5d/0x2d0 [ 401.432915][T14653] unix_seqpacket_sendmsg+0xcc/0x110 [ 401.438193][T14653] ? unix_dgram_peer_wake_me+0x310/0x310 [ 401.443817][T14653] ____sys_sendmsg+0x360/0x4d0 [ 401.448570][T14653] ? sendmsg_copy_msghdr+0xc4/0xf0 [ 401.453674][T14653] __sys_sendmsg_sock+0x25/0x30 [ 401.458574][T14653] io_issue_sqe+0x206d/0x64b0 [ 401.463265][T14653] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 401.469231][T14653] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 401.475380][T14653] ? perf_output_begin_forward+0x606/0x720 [ 401.481181][T14653] ? __fsnotify_parent+0x32f/0x430 [ 401.486303][T14653] ? __perf_event_header__init_id+0x28b/0x2d0 [ 401.492371][T14653] ? perf_prepare_sample+0xfc5/0x1080 [ 401.497738][T14653] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 401.503535][T14653] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 401.509680][T14653] __io_queue_sqe+0xe7/0x360 [ 401.514280][T14653] io_submit_sqe+0x1695/0x3400 [ 401.519053][T14653] io_submit_sqes+0x822/0xe50 [ 401.523770][T14653] __se_sys_io_uring_enter+0x213/0xae0 [ 401.529218][T14653] ? perf_trace_sys_enter+0x4d/0x2c0 [ 401.534518][T14653] __x64_sys_io_uring_enter+0x74/0x80 [ 401.539912][T14653] do_syscall_64+0x3d/0x90 [ 401.544397][T14653] ? irqentry_exit+0xe/0x30 [ 401.548990][T14653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 401.554876][T14653] RIP: 0033:0x4665f9 [ 401.558757][T14653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 401.578365][T14653] RSP: 002b:00007f629550a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 401.586802][T14653] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 401.594766][T14653] RDX: 0000000000000000 RSI: 0000000000004f96 RDI: 0000000000000003 [ 401.602750][T14653] RBP: 00007f629550a1d0 R08: 0000000000000000 R09: 0000000000000000 08:14:28 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180), r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 401.610717][T14653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.618678][T14653] R13: 00007ffc8778bf9f R14: 00007f629550a300 R15: 0000000000022000 [ 401.635413][T14655] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 401.654742][ C1] scsi_io_completion_action: 3 callbacks suppressed 08:14:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0xfeffffff00000000, 0x100000001000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:28 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x7000000, 0x0, 0x0, 0x0) 08:14:28 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) [ 401.654771][ C1] sd 0:0:1:0: [sg0] tag#5302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 401.671793][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB: opcode=0xe5 (vendor) [ 401.678672][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 401.688322][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 401.697913][ C1] sd 0:0:1:0: [sg0] tag#5302 CDB[20]: ba 08:14:28 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180), r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:28 executing program 1 (fault-call:7 fault-nth:32): r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 401.760352][ C1] sd 0:0:1:0: [sg0] tag#5303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 401.770742][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB: opcode=0xe5 (vendor) [ 401.777611][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 401.787197][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 401.796771][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[20]: ba [ 401.801968][T14682] FAULT_INJECTION: forcing a failure. [ 401.801968][T14682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.815492][T14682] CPU: 0 PID: 14682 Comm: syz-executor.1 Tainted: G W 5.14.0-rc7-syzkaller #0 [ 401.825634][T14682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.835690][T14682] Call Trace: [ 401.838968][T14682] dump_stack_lvl+0xb7/0x103 [ 401.843558][T14682] dump_stack+0x11/0x1a [ 401.847909][T14682] should_fail+0x23c/0x250 [ 401.852380][T14682] should_fail_usercopy+0x16/0x20 [ 401.857398][T14682] _copy_from_user+0x1c/0xd0 [ 401.862000][T14682] __copy_msghdr_from_user+0x44/0x350 [ 401.867555][T14682] ? unix_seqpacket_sendmsg+0xcc/0x110 [ 401.873012][T14682] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 401.878853][T14682] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 401.885031][T14682] sendmsg_copy_msghdr+0x4f/0xf0 [ 401.889969][T14682] io_issue_sqe+0x224c/0x64b0 [ 401.894710][T14682] ? avc_has_perm+0x59/0x150 [ 401.899295][T14682] ? avc_has_perm+0xc8/0x150 [ 401.903883][T14682] ? perf_output_begin_forward+0x606/0x720 [ 401.909694][T14682] ? __fsnotify_parent+0x32f/0x430 [ 401.914904][T14682] ? __perf_event_header__init_id+0x28b/0x2d0 [ 401.921053][T14682] ? perf_prepare_sample+0xfc5/0x1080 [ 401.926511][T14682] ? __perf_event_account_interrupt+0x115/0x1e0 [ 401.932868][T14682] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 401.939008][T14682] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 401.944810][T14682] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 401.950946][T14682] __io_queue_sqe+0xe7/0x360 [ 401.955517][T14682] io_submit_sqe+0x1695/0x3400 [ 401.960276][T14682] ? kmem_cache_alloc_bulk+0x289/0x340 [ 401.965750][T14682] io_submit_sqes+0x822/0xe50 [ 401.970442][T14682] __se_sys_io_uring_enter+0x213/0xae0 [ 401.975878][T14682] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 401.982034][T14682] __x64_sys_io_uring_enter+0x74/0x80 [ 401.987643][T14682] do_syscall_64+0x3d/0x90 [ 401.992085][T14682] ? irqentry_exit+0xe/0x30 [ 401.996578][T14682] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 402.002450][T14682] RIP: 0033:0x4665f9 [ 402.006323][T14682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 402.025914][T14682] RSP: 002b:00007f629550a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 402.034354][T14682] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 402.042313][T14682] RDX: 0000000000000000 RSI: 0000000000004f96 RDI: 0000000000000003 [ 402.050293][T14682] RBP: 00007f629550a1d0 R08: 0000000000000000 R09: 0000000000000000 08:14:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000040202000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:29 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x8000000, 0x0, 0x0, 0x0) 08:14:29 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180), r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:29 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0xffffff7f00000000, 0x100000001000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 402.058905][T14682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.066993][T14682] R13: 00007ffc8778bf9f R14: 00007f629550a300 R15: 0000000000022000 [ 402.091883][T14655] loop4: detected capacity change from 0 to 4 [ 402.099811][T14655] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:29 executing program 1 (fault-call:7 fault-nth:33): r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:29 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:29 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:29 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000000040000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 402.151575][ C0] sd 0:0:1:0: [sg0] tag#5304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 402.162150][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB: opcode=0xe5 (vendor) [ 402.169055][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 402.178647][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 402.188607][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[20]: ba 08:14:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000002}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 402.259527][T14709] FAULT_INJECTION: forcing a failure. [ 402.259527][T14709] name failslab, interval 1, probability 0, space 0, times 0 [ 402.272450][T14709] CPU: 1 PID: 14709 Comm: syz-executor.1 Tainted: G W 5.14.0-rc7-syzkaller #0 [ 402.276637][ C0] sd 0:0:1:0: [sg0] tag#5305 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 402.282602][T14709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.282616][T14709] Call Trace: [ 402.292968][ C0] sd 0:0:1:0: [sg0] tag#5305 CDB: opcode=0xe5 (vendor) [ 402.302973][T14709] dump_stack_lvl+0xb7/0x103 [ 402.302996][T14709] dump_stack+0x11/0x1a [ 402.306281][ C0] sd 0:0:1:0: [sg0] tag#5305 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 402.313088][T14709] should_fail+0x23c/0x250 [ 402.317689][ C0] sd 0:0:1:0: [sg0] tag#5305 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 402.317708][ C0] sd 0:0:1:0: [sg0] tag#5305 CDB[20]: ba [ 402.351030][T14709] __should_failslab+0x81/0x90 [ 402.355780][T14709] should_failslab+0x5/0x20 [ 402.360266][T14709] kmem_cache_alloc_node+0x58/0x2b0 [ 402.365600][T14709] ? __alloc_skb+0xed/0x420 [ 402.370102][T14709] __alloc_skb+0xed/0x420 [ 402.374423][T14709] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 402.380234][T14709] alloc_skb_with_frags+0x90/0x390 [ 402.385372][T14709] ? sock_alloc_send_pskb+0x154/0x4e0 [ 402.390778][T14709] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 402.396621][T14709] sock_alloc_send_pskb+0x436/0x4e0 [ 402.401805][T14709] unix_dgram_sendmsg+0x478/0x1600 [ 402.406925][T14709] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 402.413067][T14709] ? iovec_from_user+0x5d/0x2d0 [ 402.417907][T14709] unix_seqpacket_sendmsg+0xcc/0x110 [ 402.423180][T14709] ? unix_dgram_peer_wake_me+0x310/0x310 [ 402.428799][T14709] ____sys_sendmsg+0x360/0x4d0 [ 402.433634][T14709] ? sendmsg_copy_msghdr+0xc4/0xf0 [ 402.438729][T14709] __sys_sendmsg_sock+0x25/0x30 [ 402.443580][T14709] io_issue_sqe+0x206d/0x64b0 [ 402.448240][T14709] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 402.454382][T14709] ? __tsan_read8+0xf0/0x180 [ 402.458963][T14709] ? __fsnotify_parent+0x32f/0x430 [ 402.464191][T14709] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 402.470110][T14709] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 402.476252][T14709] __io_queue_sqe+0xe7/0x360 [ 402.480836][T14709] io_submit_sqe+0x1695/0x3400 [ 402.485609][T14709] ? kmem_cache_alloc_bulk+0x289/0x340 [ 402.491146][T14709] io_submit_sqes+0x822/0xe50 [ 402.495811][T14709] __se_sys_io_uring_enter+0x213/0xae0 [ 402.501255][T14709] ? perf_trace_sys_enter+0x4d/0x2c0 [ 402.506578][T14709] ? fput+0x2d/0x130 [ 402.510485][T14709] __x64_sys_io_uring_enter+0x74/0x80 [ 402.515873][T14709] do_syscall_64+0x3d/0x90 [ 402.520277][T14709] ? irqentry_exit+0xe/0x30 [ 402.524814][T14709] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 402.530694][T14709] RIP: 0033:0x4665f9 [ 402.534571][T14709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 08:14:29 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x9000000, 0x0, 0x0, 0x0) [ 402.554254][T14709] RSP: 002b:00007f629550a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 402.562667][T14709] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 402.570684][T14709] RDX: 0000000000000000 RSI: 0000000000004f96 RDI: 0000000000000003 [ 402.578636][T14709] RBP: 00007f629550a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 402.586587][T14709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.594576][T14709] R13: 00007ffc8778bf9f R14: 00007f629550a300 R15: 0000000000022000 [ 402.609703][T14721] loop4: detected capacity change from 0 to 4 [ 402.644632][T14721] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000302000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:29 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:29 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000003}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:29 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0xa000000, 0x0, 0x0, 0x0) 08:14:29 executing program 1 (fault-call:7 fault-nth:34): r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 402.690628][T14721] loop4: detected capacity change from 0 to 4 [ 402.698384][T14721] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000004}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 402.744684][ C1] sd 0:0:1:0: [sg0] tag#5306 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 402.755063][ C1] sd 0:0:1:0: [sg0] tag#5306 CDB: opcode=0xe5 (vendor) [ 402.761912][ C1] sd 0:0:1:0: [sg0] tag#5306 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 402.771477][ C1] sd 0:0:1:0: [sg0] tag#5306 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 402.781036][ C1] sd 0:0:1:0: [sg0] tag#5306 CDB[20]: ba [ 402.794594][T14744] FAULT_INJECTION: forcing a failure. [ 402.794594][T14744] name failslab, interval 1, probability 0, space 0, times 0 [ 402.807281][T14744] CPU: 0 PID: 14744 Comm: syz-executor.1 Tainted: G W 5.14.0-rc7-syzkaller #0 [ 402.817695][T14744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.828009][T14744] Call Trace: [ 402.831339][T14744] dump_stack_lvl+0xb7/0x103 [ 402.835957][T14744] dump_stack+0x11/0x1a [ 402.840113][T14744] should_fail+0x23c/0x250 08:14:29 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0xb000000, 0x0, 0x0, 0x0) 08:14:29 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:29 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 08:14:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000005}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 402.844529][T14744] __should_failslab+0x81/0x90 [ 402.849286][T14744] should_failslab+0x5/0x20 [ 402.853786][T14744] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 402.859504][T14744] ? __kmalloc_node_track_caller+0x30/0x40 [ 402.865437][T14744] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 402.870910][T14744] __kmalloc_node_track_caller+0x30/0x40 [ 402.876550][T14744] ? alloc_skb_with_frags+0x90/0x390 [ 402.881930][T14744] __alloc_skb+0x187/0x420 [ 402.886353][T14744] alloc_skb_with_frags+0x90/0x390 08:14:29 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 402.891468][T14744] sock_alloc_send_pskb+0x436/0x4e0 [ 402.896727][T14744] unix_dgram_sendmsg+0x478/0x1600 [ 402.901865][T14744] ? iovec_from_user+0x5d/0x2d0 [ 402.906714][T14744] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 402.912865][T14744] unix_seqpacket_sendmsg+0xcc/0x110 [ 402.918158][T14744] ? unix_dgram_peer_wake_me+0x310/0x310 [ 402.923796][T14744] ____sys_sendmsg+0x360/0x4d0 [ 402.928565][T14744] ? sendmsg_copy_msghdr+0xc4/0xf0 [ 402.933673][T14744] __sys_sendmsg_sock+0x25/0x30 [ 402.938523][T14744] io_issue_sqe+0x206d/0x64b0 [ 402.943193][T14744] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 402.948999][T14744] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 402.955295][T14744] ? perf_output_begin_forward+0x606/0x720 [ 402.961381][T14744] ? __perf_event_header__init_id+0x28b/0x2d0 [ 402.967445][T14744] ? perf_prepare_sample+0xfc5/0x1080 [ 402.972808][T14744] ? __perf_event_account_interrupt+0x115/0x1e0 [ 402.979058][T14744] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 402.985263][T14744] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 402.991063][T14744] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 402.997227][T14744] __io_queue_sqe+0xe7/0x360 [ 403.001840][T14744] io_submit_sqe+0x1695/0x3400 [ 403.006602][T14744] ? kmem_cache_alloc_bulk+0x289/0x340 [ 403.012057][T14744] io_submit_sqes+0x822/0xe50 [ 403.016737][T14744] __se_sys_io_uring_enter+0x213/0xae0 [ 403.022293][T14744] ? perf_trace_sys_enter+0x4d/0x2c0 [ 403.027599][T14744] ? fput+0x2d/0x130 [ 403.031491][T14744] __x64_sys_io_uring_enter+0x74/0x80 [ 403.036867][T14744] do_syscall_64+0x3d/0x90 [ 403.041275][T14744] ? irqentry_exit+0xe/0x30 [ 403.045983][T14744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 403.052138][T14744] RIP: 0033:0x4665f9 [ 403.056141][T14744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 403.075917][T14744] RSP: 002b:00007f629550a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 403.084327][T14744] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 403.092340][T14744] RDX: 0000000000000000 RSI: 0000000000004f96 RDI: 0000000000000003 [ 403.100301][T14744] RBP: 00007f629550a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 403.108381][T14744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.116389][T14744] R13: 00007ffc8778bf9f R14: 00007f629550a300 R15: 0000000000022000 [ 403.126061][ C1] sd 0:0:1:0: [sg0] tag#5307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 403.136428][ C1] sd 0:0:1:0: [sg0] tag#5307 CDB: opcode=0xe5 (vendor) [ 403.143295][ C1] sd 0:0:1:0: [sg0] tag#5307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 403.152861][ C1] sd 0:0:1:0: [sg0] tag#5307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 403.162508][ C1] sd 0:0:1:0: [sg0] tag#5307 CDB[20]: ba 08:14:30 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0xc000000, 0x0, 0x0, 0x0) 08:14:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000020402000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000006}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:30 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:30 executing program 1 (fault-call:7 fault-nth:35): r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:30 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) [ 403.201619][T14775] loop4: detected capacity change from 0 to 4 [ 403.222810][T14775] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 403.306316][ C1] sd 0:0:1:0: [sg0] tag#5308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 403.316705][ C1] sd 0:0:1:0: [sg0] tag#5308 CDB: opcode=0xe5 (vendor) [ 403.318927][T14798] loop4: detected capacity change from 0 to 4 [ 403.323657][ C1] sd 0:0:1:0: [sg0] tag#5308 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 403.339248][ C1] sd 0:0:1:0: [sg0] tag#5308 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 403.343962][T14798] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000007}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 403.348814][ C1] sd 0:0:1:0: [sg0] tag#5308 CDB[20]: ba 08:14:30 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:30 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0xd000000, 0x0, 0x0, 0x0) 08:14:30 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) [ 403.431308][T14813] __nla_validate_parse: 54 callbacks suppressed [ 403.431324][T14813] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.461998][T14813] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. 08:14:30 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0xe000000, 0x0, 0x0, 0x0) 08:14:30 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0xf000000, 0x0, 0x0, 0x0) [ 403.473052][T14818] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.489339][T14798] loop4: detected capacity change from 0 to 4 [ 403.504097][T14798] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 403.515392][ C0] sd 0:0:1:0: [sg0] tag#5309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 08:14:30 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 403.525778][ C0] sd 0:0:1:0: [sg0] tag#5309 CDB: opcode=0xe5 (vendor) [ 403.532627][ C0] sd 0:0:1:0: [sg0] tag#5309 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 403.542217][ C0] sd 0:0:1:0: [sg0] tag#5309 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 403.551882][ C0] sd 0:0:1:0: [sg0] tag#5309 CDB[20]: ba 08:14:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000060402000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000008}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:30 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:30 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x10000000, 0x0, 0x0, 0x0) 08:14:30 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:30 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 403.685254][T14846] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.699349][T14847] loop4: detected capacity change from 0 to 4 [ 403.707603][ C1] sd 0:0:1:0: [sg0] tag#5310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 403.715989][T14846] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.718077][ C1] sd 0:0:1:0: [sg0] tag#5310 CDB: opcode=0xe5 (vendor) 08:14:30 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:30 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 403.734432][ C1] sd 0:0:1:0: [sg0] tag#5310 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 403.743259][T14853] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.744083][ C1] sd 0:0:1:0: [sg0] tag#5310 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 403.763063][ C1] sd 0:0:1:0: [sg0] tag#5310 CDB[20]: ba 08:14:30 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x11000000, 0x0, 0x0, 0x0) 08:14:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000009}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 403.808348][T14847] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 403.845820][ C1] sd 0:0:1:0: [sg0] tag#5311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 08:14:30 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 403.846095][T14866] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.856522][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB: opcode=0xe5 (vendor) [ 403.856539][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 403.856555][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 403.856570][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[20]: ba [ 403.876169][T14866] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. 08:14:30 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 403.915377][T14870] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. 08:14:30 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x2, 0x0, 0x0, 0x0) 08:14:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000100402000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10000000100000a}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:30 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x12000000, 0x0, 0x0, 0x0) 08:14:30 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:30 executing program 2: r0 = syz_io_uring_setup(0x21c, 0x0, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 403.974097][T14847] loop4: detected capacity change from 0 to 4 [ 403.980659][T14847] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:30 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:31 executing program 2: r0 = syz_io_uring_setup(0x21c, 0x0, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 404.021004][T14892] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. 08:14:31 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x13000000, 0x0, 0x0, 0x0) [ 404.079942][T14902] loop4: detected capacity change from 0 to 4 08:14:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10000000100000b}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:31 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:31 executing program 2: r0 = syz_io_uring_setup(0x21c, 0x0, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 404.122562][T14902] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:31 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x3, 0x0, 0x0, 0x0) 08:14:31 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x14000000, 0x0, 0x0, 0x0) [ 404.194015][T14902] loop4: detected capacity change from 0 to 4 [ 404.204465][T14902] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000502000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:31 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 08:14:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10000000100000c}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:31 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:31 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x15000000, 0x0, 0x0, 0x0) 08:14:31 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10000000100000d}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:31 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x4, 0x0, 0x0, 0x0) 08:14:31 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) [ 404.332493][T14953] loop4: detected capacity change from 0 to 4 [ 404.367662][T14953] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:31 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x16000000, 0x0, 0x0, 0x0) 08:14:31 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10000000100000e}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 404.423978][T14953] loop4: detected capacity change from 0 to 4 [ 404.441497][T14953] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000602000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:31 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 08:14:31 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:31 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x17000000, 0x0, 0x0, 0x0) 08:14:31 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 08:14:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000010}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:31 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:31 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x8, 0x0, 0x0, 0x0) 08:14:31 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x18000000, 0x0, 0x0, 0x0) 08:14:31 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 08:14:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000011}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 404.585026][T14999] loop4: detected capacity change from 0 to 4 [ 404.615079][T14999] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:31 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 404.693265][T14999] loop4: detected capacity change from 0 to 4 [ 404.703818][T14999] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000040602000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000012}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:31 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 08:14:31 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x19000000, 0x0, 0x0, 0x0) 08:14:31 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:31 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:31 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xf, 0x0, 0x0, 0x0) [ 404.802611][T15046] loop4: detected capacity change from 0 to 4 [ 404.821195][T15046] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:31 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000025}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:31 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x1a000000, 0x0, 0x0, 0x0) [ 404.873679][T15046] loop4: detected capacity change from 0 to 4 [ 404.886992][T15046] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000702000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:31 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:31 executing program 5: syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r4}, 0x8) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000048}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:31 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x1b000000, 0x0, 0x0, 0x0) 08:14:31 executing program 5: syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r4}, 0x8) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:31 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 404.985798][T15084] loop4: detected capacity change from 0 to 4 [ 405.017921][T15084] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10000000100004c}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:32 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x11, 0x0, 0x0, 0x0) [ 405.077720][T15084] loop4: detected capacity change from 0 to 4 [ 405.088865][T15084] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000060}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:32 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:32 executing program 5: syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r4}, 0x8) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000902000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:32 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x1c000000, 0x0, 0x0, 0x0) 08:14:32 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:32 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:14:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000068}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:32 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 405.208436][T15128] loop4: detected capacity change from 0 to 4 [ 405.242585][T15128] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:32 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x1d000000, 0x0, 0x0, 0x0) 08:14:32 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 405.293194][T15128] loop4: detected capacity change from 0 to 4 [ 405.302019][T15128] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:32 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xc0, 0x0, 0x0, 0x0) 08:14:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10000000100006c}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:32 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000a02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:32 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x1e000000, 0x0, 0x0, 0x0) 08:14:32 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:14:32 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:32 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000074}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 405.424759][T15167] loop4: detected capacity change from 0 to 4 [ 405.450274][T15167] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:32 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x1f000000, 0x0, 0x0, 0x0) 08:14:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10000000100007a}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 405.515278][T15167] loop4: detected capacity change from 0 to 4 [ 405.532807][T15167] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:32 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:32 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x300, 0x0, 0x0, 0x0) 08:14:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000b02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:32 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000300}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x400000000000000, 0x100000001000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:32 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x20000000, 0x0, 0x0, 0x0) 08:14:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10000000100031c}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:32 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x148c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xf0002000}, r5}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:32 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 405.722403][T15221] loop4: detected capacity change from 0 to 4 [ 405.744673][T15221] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:32 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x21000000, 0x0, 0x0, 0x0) 08:14:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000500}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 405.780159][T15221] loop4: detected capacity change from 0 to 4 [ 405.792412][T15221] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:32 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:32 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xf00, 0x0, 0x0, 0x0) 08:14:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000c02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:32 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x22000000, 0x0, 0x0, 0x0) 08:14:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0xffffff7f, 0x100000001000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000600}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:32 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x23000000, 0x0, 0x0, 0x0) 08:14:32 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:32 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 405.954050][T15265] loop4: detected capacity change from 0 to 4 08:14:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000700}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 406.001341][T15265] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:32 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:33 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x1100, 0x0, 0x0, 0x0) 08:14:33 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x24000000, 0x0, 0x0, 0x0) [ 406.067372][T15265] loop4: detected capacity change from 0 to 4 [ 406.080499][T15265] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000900}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000d02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:33 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:33 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r196 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r196, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r197 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r197, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:33 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0xf5ffffff, 0x0, 0x0, 0x0) 08:14:33 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000a00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 406.210845][T15307] loop4: detected capacity change from 0 to 4 [ 406.243803][T15307] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:33 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0xfffffff5, 0x0, 0x0, 0x0) 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000b00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 406.283160][T15307] loop4: detected capacity change from 0 to 4 [ 406.289789][T15307] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:33 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 08:14:33 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x2000, 0x0, 0x0, 0x0) 08:14:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000e02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:33 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 08:14:33 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x2, 0x0, 0x0) 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000c00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 406.452374][T15351] loop4: detected capacity change from 0 to 4 [ 406.485484][T15351] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:33 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x3, 0x0, 0x0) 08:14:33 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r196 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r196, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r197 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r197, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:33 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000d00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:33 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x3e80, 0x0, 0x0, 0x0) 08:14:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000f02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) [ 406.559707][T15351] loop4: detected capacity change from 0 to 4 [ 406.567465][T15351] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000e00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:33 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:33 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x4, 0x0, 0x0) [ 406.636010][T15391] loop4: detected capacity change from 0 to 4 [ 406.668807][T15391] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001001100}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 406.733054][T15391] loop4: detected capacity change from 0 to 4 [ 406.736803][ C1] scsi_io_completion_action: 33 callbacks suppressed [ 406.736828][ C1] sd 0:0:1:0: [sg0] tag#5283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 406.756249][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB: opcode=0xe5 (vendor) [ 406.763115][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 406.772795][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001001200}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:33 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x5, 0x0, 0x0) [ 406.782355][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[20]: ba [ 406.792146][T15391] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:33 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r196 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r196, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r197 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r197, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:33 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001001687}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:33 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x6, 0x0, 0x0) 08:14:33 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x3ec0, 0x0, 0x0, 0x0) 08:14:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000041002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) [ 406.973102][T15476] loop4: detected capacity change from 0 to 4 [ 406.981618][ C1] sd 0:0:1:0: [sg0] tag#5284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 406.992062][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB: opcode=0xe5 (vendor) [ 406.994925][ C0] sd 0:0:1:0: [sg0] tag#5285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 406.999208][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 08:14:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001001c03}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 406.999226][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 407.009831][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB: opcode=0xe5 (vendor) [ 407.019446][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[20]: ba [ 407.028994][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 407.051338][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 407.060990][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[20]: ba 08:14:34 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:34 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x7, 0x0, 0x0) 08:14:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001002000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 407.105505][T15476] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000201002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001002500}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 407.171303][ C1] sd 0:0:1:0: [sg0] tag#5286 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 407.181687][ C1] sd 0:0:1:0: [sg0] tag#5286 CDB: opcode=0xe5 (vendor) [ 407.188555][ C1] sd 0:0:1:0: [sg0] tag#5286 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 407.198314][ C1] sd 0:0:1:0: [sg0] tag#5286 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 407.208057][ C1] sd 0:0:1:0: [sg0] tag#5286 CDB[20]: ba 08:14:34 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r196 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r196, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r197 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r197, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:34 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:34 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x8, 0x0, 0x0) 08:14:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001004800}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 407.272261][T15500] loop4: detected capacity change from 0 to 4 [ 407.280879][T15500] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:34 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x803e, 0x0, 0x0, 0x0) [ 407.313914][T15500] loop4: detected capacity change from 0 to 4 [ 407.335174][T15500] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 407.354633][ C1] sd 0:0:1:0: [sg0] tag#5287 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 407.365010][ C1] sd 0:0:1:0: [sg0] tag#5287 CDB: opcode=0xe5 (vendor) [ 407.371879][ C1] sd 0:0:1:0: [sg0] tag#5287 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 407.381441][ C1] sd 0:0:1:0: [sg0] tag#5287 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 407.390987][ C1] sd 0:0:1:0: [sg0] tag#5287 CDB[20]: ba 08:14:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001004c00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:34 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 407.408183][ C1] sd 0:0:1:0: [sg0] tag#5288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 407.418774][ C1] sd 0:0:1:0: [sg0] tag#5288 CDB: opcode=0xe5 (vendor) [ 407.425641][ C1] sd 0:0:1:0: [sg0] tag#5288 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 407.435311][ C1] sd 0:0:1:0: [sg0] tag#5288 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 407.445056][ C1] sd 0:0:1:0: [sg0] tag#5288 CDB[20]: ba 08:14:34 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xc000, 0x0, 0x0, 0x0) 08:14:34 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x9, 0x0, 0x0) 08:14:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001006000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 407.538442][ C1] sd 0:0:1:0: [sg0] tag#5289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 407.549043][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB: opcode=0xe5 (vendor) [ 407.555904][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 407.565716][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 407.575544][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[20]: ba 08:14:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001102000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:34 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xa, 0x0, 0x0) 08:14:34 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r195 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r195, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:34 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xc03e, 0x0, 0x0, 0x0) 08:14:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001006800}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:34 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:34 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xb, 0x0, 0x0) [ 407.657553][T15571] loop4: detected capacity change from 0 to 4 [ 407.685408][T15571] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 407.726182][ C1] sd 0:0:1:0: [sg0] tag#5290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 407.736583][ C1] sd 0:0:1:0: [sg0] tag#5290 CDB: opcode=0xe5 (vendor) [ 407.743458][ C1] sd 0:0:1:0: [sg0] tag#5290 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 407.753033][ C1] sd 0:0:1:0: [sg0] tag#5290 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 407.760899][ C0] sd 0:0:1:0: [sg0] tag#5291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 407.762602][ C1] sd 0:0:1:0: [sg0] tag#5290 CDB[20]: ba [ 407.772940][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB: opcode=0xe5 (vendor) [ 407.785403][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 407.795058][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 407.804637][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[20]: ba 08:14:34 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xc, 0x0, 0x0) 08:14:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001006c00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:34 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xd, 0x0, 0x0) 08:14:34 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r195 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r195, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001007400}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 407.951452][ C0] sd 0:0:1:0: [sg0] tag#5292 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 407.961946][ C0] sd 0:0:1:0: [sg0] tag#5292 CDB: opcode=0xe5 (vendor) [ 407.968890][ C0] sd 0:0:1:0: [sg0] tag#5292 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 407.978485][ C0] sd 0:0:1:0: [sg0] tag#5292 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 407.988232][ C0] sd 0:0:1:0: [sg0] tag#5292 CDB[20]: ba [ 408.018511][T15571] loop4: detected capacity change from 0 to 4 [ 408.025547][T15571] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001202000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:35 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001007a00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:35 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xe, 0x0, 0x0) 08:14:35 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x33fe0, 0x0, 0x0, 0x0) 08:14:35 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r195 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r195, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001008716}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:35 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 408.129247][T15638] loop4: detected capacity change from 0 to 4 [ 408.155274][T15638] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:35 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xf, 0x0, 0x0) 08:14:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000003000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:35 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 408.234457][T15638] loop4: detected capacity change from 0 to 4 [ 408.241784][T15638] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000002002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:35 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x10, 0x0, 0x0) 08:14:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000008000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:35 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x34000, 0x0, 0x0, 0x0) 08:14:35 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x11, 0x0, 0x0) 08:14:35 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000025000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 408.377819][T15681] loop4: detected capacity change from 0 to 4 [ 408.412675][T15681] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:35 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x12, 0x0, 0x0) [ 408.459482][T15681] loop4: detected capacity change from 0 to 4 [ 408.468419][T15681] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 408.480960][T15700] __nla_validate_parse: 128 callbacks suppressed [ 408.480972][T15700] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. 08:14:35 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000102002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:35 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x13, 0x0, 0x0) 08:14:35 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000000f2ffff7f}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 408.536041][T15700] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.564254][T15707] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. 08:14:35 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x40000, 0x0, 0x0, 0x0) [ 408.658954][T15723] loop4: detected capacity change from 0 to 4 [ 408.669774][T15725] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.685207][T15723] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 408.692224][T15725] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. 08:14:35 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x14, 0x0, 0x0) 08:14:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000002202000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) [ 408.702893][T15729] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. 08:14:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000000f8ffff7f}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:35 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x15, 0x0, 0x0) 08:14:35 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 408.789392][T15741] loop4: detected capacity change from 0 to 4 [ 408.819141][T15743] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.820029][T15741] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:35 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x16, 0x0, 0x0) [ 408.856543][T15743] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.893440][T15741] loop4: detected capacity change from 0 to 4 08:14:35 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:35 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:35 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x80000, 0x0, 0x0, 0x0) [ 408.902812][T15741] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 408.908822][T15750] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. 08:14:35 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x17, 0x0, 0x0) 08:14:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000000f9ffff7f}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000002502000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) [ 409.013725][T15776] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 409.027919][T15779] loop4: detected capacity change from 0 to 4 08:14:36 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x18, 0x0, 0x0) 08:14:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000000ffffff7f}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 409.060558][T15779] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:36 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:36 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x19, 0x0, 0x0) [ 409.134126][T15779] loop4: detected capacity change from 0 to 4 [ 409.156347][T15779] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x2}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000002e02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:36 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r196 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r196, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:36 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x400300, 0x0, 0x0, 0x0) 08:14:36 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1a, 0x0, 0x0) 08:14:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x3}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 409.278436][T15815] loop4: detected capacity change from 0 to 4 [ 409.289697][T15815] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:36 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1b, 0x0, 0x0) [ 409.361695][T15815] loop4: detected capacity change from 0 to 4 [ 409.378755][T15815] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x4}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:36 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003f02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:36 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1c, 0x0, 0x0) 08:14:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x5}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 409.490653][T15851] loop4: detected capacity change from 0 to 4 [ 409.529005][T15851] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:36 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xfeffff, 0x0, 0x0, 0x0) 08:14:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:36 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r196 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r196, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:36 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1d, 0x0, 0x0) 08:14:36 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x6}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 409.655055][T15874] loop4: detected capacity change from 0 to 4 08:14:36 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1e, 0x0, 0x0) [ 409.706926][T15874] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x7}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:36 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x1000000, 0x0, 0x0, 0x0) 08:14:36 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x21, 0x0, 0x0) [ 409.751816][T15874] loop4: detected capacity change from 0 to 4 [ 409.773264][T15874] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004802000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x8}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:36 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:36 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x22, 0x0, 0x0) [ 409.882338][T15917] loop4: detected capacity change from 0 to 4 [ 409.914555][T15917] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:36 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r196 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r196, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x9}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:36 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x23, 0x0, 0x0) [ 409.972762][T15917] loop4: detected capacity change from 0 to 4 [ 409.985284][T15917] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004c02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:37 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x2000000, 0x0, 0x0, 0x0) 08:14:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xa}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:37 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:37 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x24, 0x0, 0x0) [ 410.094566][T15953] loop4: detected capacity change from 0 to 4 08:14:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xb}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 410.151510][T15953] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:37 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x300, 0x0, 0x0) [ 410.226576][T15953] loop4: detected capacity change from 0 to 4 [ 410.239499][T15953] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xc}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000006002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:37 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x3000000, 0x0, 0x0, 0x0) 08:14:37 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x500, 0x0, 0x0) 08:14:37 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:37 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r196 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r196, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xd}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 410.349480][T15992] loop4: detected capacity change from 0 to 4 [ 410.366376][T15992] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:37 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x600, 0x0, 0x0) [ 410.428480][T15992] loop4: detected capacity change from 0 to 4 [ 410.437164][T15992] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xe}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000006802000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:37 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x700, 0x0, 0x0) 08:14:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x10}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:37 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x900, 0x0, 0x0) [ 410.585909][T16030] loop4: detected capacity change from 0 to 4 [ 410.612972][T16030] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:37 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xa00, 0x0, 0x0) 08:14:37 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x4000000, 0x0, 0x0, 0x0) [ 410.650848][T16030] loop4: detected capacity change from 0 to 4 [ 410.660704][T16030] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000006c02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:37 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:37 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r196 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r196, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x11}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:37 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xb00, 0x0, 0x0) [ 410.761384][T16054] loop4: detected capacity change from 0 to 4 [ 410.785755][T16054] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:37 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xf000000, 0x0, 0x0, 0x0) [ 410.854571][T16054] loop4: detected capacity change from 0 to 4 [ 410.866296][T16054] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x12}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:37 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xc00, 0x0, 0x0) 08:14:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000007402000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x25}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:37 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xd00, 0x0, 0x0) 08:14:37 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 410.982577][T16090] loop4: detected capacity change from 0 to 4 [ 411.019683][T16090] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x48}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:38 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x11000000, 0x0, 0x0, 0x0) [ 411.089994][T16090] loop4: detected capacity change from 0 to 4 [ 411.100889][T16090] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x4c}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:38 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xe00, 0x0, 0x0) 08:14:38 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r196 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r196, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000007a02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:38 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xf00, 0x0, 0x0) 08:14:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x60}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 411.227352][T16129] loop4: detected capacity change from 0 to 4 [ 411.273918][T16129] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x68}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:38 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x20000000, 0x0, 0x0, 0x0) 08:14:38 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1100, 0x0, 0x0) [ 411.346589][T16129] loop4: detected capacity change from 0 to 4 [ 411.356801][T16129] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:38 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000ad02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x6c}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:38 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1200, 0x0, 0x0) 08:14:38 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:38 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1300, 0x0, 0x0) [ 411.527416][T16171] loop4: detected capacity change from 0 to 4 08:14:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x74}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:38 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x803e0000, 0x0, 0x0, 0x0) 08:14:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000ae02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) [ 411.568377][T16171] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x7a}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:38 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1400, 0x0, 0x0) 08:14:38 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 411.655064][T16196] loop4: detected capacity change from 0 to 4 [ 411.691721][T16196] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x300}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:38 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1500, 0x0, 0x0) [ 411.754115][T16196] loop4: detected capacity change from 0 to 4 [ 411.763815][T16196] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 411.790917][ C0] scsi_io_completion_action: 20 callbacks suppressed 08:14:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x31c}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000af02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) [ 411.790944][ C0] sd 0:0:1:0: [sg0] tag#5251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 411.808302][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB: opcode=0xe5 (vendor) [ 411.815182][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 411.825099][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 411.834691][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[20]: ba 08:14:38 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:38 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xc0000000, 0x0, 0x0, 0x0) 08:14:38 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1600, 0x0, 0x0) 08:14:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x500}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 411.946304][T16238] loop4: detected capacity change from 0 to 4 [ 411.960656][ C1] sd 0:0:1:0: [sg0] tag#5252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 411.971035][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB: opcode=0xe5 (vendor) [ 411.977899][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 08:14:38 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1700, 0x0, 0x0) 08:14:38 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 411.987486][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 411.997058][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[20]: ba 08:14:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x600}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:39 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1800, 0x0, 0x0) 08:14:39 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xc03e0000, 0x0, 0x0, 0x0) [ 412.060426][ C1] sd 0:0:1:0: [sg0] tag#5253 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.070854][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB: opcode=0xe5 (vendor) [ 412.077885][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 412.087455][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 412.097037][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[20]: ba [ 412.102819][T16238] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000fffe02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:39 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1900, 0x0, 0x0) 08:14:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x700}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:39 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000fff02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:39 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:39 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1a00, 0x0, 0x0) 08:14:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x900}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:39 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xe03f0300, 0x0, 0x0, 0x0) 08:14:39 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1b00, 0x0, 0x0) [ 412.286175][ C1] sd 0:0:1:0: [sg0] tag#5254 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.296557][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB: opcode=0xe5 (vendor) [ 412.303434][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 412.312992][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 412.322721][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[20]: ba 08:14:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xa00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:39 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1c00, 0x0, 0x0) [ 412.351118][T16295] loop4: detected capacity change from 0 to 4 08:14:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xb00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 412.409236][ C1] sd 0:0:1:0: [sg0] tag#5255 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.419615][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB: opcode=0xe5 (vendor) [ 412.426491][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 412.436074][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 412.445632][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[20]: ba 08:14:39 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 412.456107][T16295] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:39 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xc00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 412.531957][ C1] sd 0:0:1:0: [sg0] tag#5256 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.542352][ C1] sd 0:0:1:0: [sg0] tag#5256 CDB: opcode=0xe5 (vendor) [ 412.549230][ C1] sd 0:0:1:0: [sg0] tag#5256 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 412.558799][ C1] sd 0:0:1:0: [sg0] tag#5256 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 412.562161][ C0] sd 0:0:1:0: [sg0] tag#5257 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.568353][ C1] sd 0:0:1:0: [sg0] tag#5256 CDB[20]: ba [ 412.578672][ C0] sd 0:0:1:0: [sg0] tag#5257 CDB: opcode=0xe5 (vendor) [ 412.591166][ C0] sd 0:0:1:0: [sg0] tag#5257 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 412.600729][ C0] sd 0:0:1:0: [sg0] tag#5257 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 412.610316][ C0] sd 0:0:1:0: [sg0] tag#5257 CDB[20]: ba 08:14:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000feff02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:39 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xeffdffff, 0x0, 0x0, 0x0) 08:14:39 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1d00, 0x0, 0x0) 08:14:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xd00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:39 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:39 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 412.646782][T16295] loop4: detected capacity change from 0 to 4 [ 412.656506][T16295] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 412.691265][ C1] sd 0:0:1:0: [sg0] tag#5258 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.701649][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB: opcode=0xe5 (vendor) [ 412.708497][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 412.717537][ C0] sd 0:0:1:0: [sg0] tag#5259 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.718076][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 08:14:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xe00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 412.728378][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB: opcode=0xe5 (vendor) [ 412.737975][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[20]: ba [ 412.745003][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 412.760177][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 412.769772][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[20]: ba 08:14:39 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:39 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1e00, 0x0, 0x0) 08:14:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x1100}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:39 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xf5ffffff, 0x0, 0x0, 0x0) 08:14:39 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 412.887332][ C0] sd 0:0:1:0: [sg0] tag#5260 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.897989][ C0] sd 0:0:1:0: [sg0] tag#5260 CDB: opcode=0xe5 (vendor) [ 412.904871][ C0] sd 0:0:1:0: [sg0] tag#5260 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 412.914581][ C0] sd 0:0:1:0: [sg0] tag#5260 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 412.924162][ C0] sd 0:0:1:0: [sg0] tag#5260 CDB[20]: ba [ 412.929323][T16367] loop4: detected capacity change from 0 to 4 [ 412.979604][T16367] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 413.026407][T16367] loop4: detected capacity change from 0 to 4 [ 413.034094][T16367] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000004000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x1200}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:40 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1f00, 0x0, 0x0) 08:14:40 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:40 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xfffffdef, 0x0, 0x0, 0x0) 08:14:40 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x1687}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:40 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x2000, 0x0, 0x0) [ 413.146786][T16397] loop4: detected capacity change from 0 to 4 [ 413.169787][T16397] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x1c03}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:40 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 413.240929][T16397] loop4: detected capacity change from 0 to 4 [ 413.255281][T16397] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x2000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:40 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000010000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:40 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x2100, 0x0, 0x0) 08:14:40 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x2500}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 413.404972][T16438] loop4: detected capacity change from 0 to 4 08:14:40 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xfffffe00, 0x0, 0x0, 0x0) 08:14:40 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x2200, 0x0, 0x0) 08:14:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x4800}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 413.449703][T16438] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000000010019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:40 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x2300, 0x0, 0x0) 08:14:40 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 413.530591][T16457] __nla_validate_parse: 127 callbacks suppressed [ 413.530604][T16457] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 413.543760][T16465] loop4: detected capacity change from 0 to 4 [ 413.558069][T16465] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:40 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:40 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x2400, 0x0, 0x0) [ 413.618797][T16457] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 413.641720][T16465] loop4: detected capacity change from 0 to 4 [ 413.644589][T16475] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 413.656959][T16465] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x4c00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000e010019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:40 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xffffff7f, 0x0, 0x0, 0x0) 08:14:40 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:40 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x40000, 0x0, 0x0) [ 413.762254][T16494] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 413.777716][T16497] loop4: detected capacity change from 0 to 4 [ 413.801556][T16497] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 413.816190][T16494] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. 08:14:40 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:40 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x80000, 0x0, 0x0) 08:14:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x6000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 413.861885][T16505] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 413.877212][T16497] loop4: detected capacity change from 0 to 4 [ 413.885577][T16497] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000202000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:40 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:40 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1000000, 0x0, 0x0) 08:14:40 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0xfffffff5, 0x0, 0x0, 0x0) [ 414.008324][T16529] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 414.027922][T16532] loop4: detected capacity change from 0 to 4 [ 414.047502][T16529] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. 08:14:41 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x2000000, 0x0, 0x0) [ 414.058632][T16532] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 414.084716][T16537] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. 08:14:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x6800}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:41 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 414.104175][T16532] loop4: detected capacity change from 0 to 4 [ 414.118249][T16532] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000302000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:41 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:41 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x3000000, 0x0, 0x0) 08:14:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x6c00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 414.208448][T16556] netlink: 796 bytes leftover after parsing attributes in process `syz-executor.0'. [ 414.236611][T16562] loop4: detected capacity change from 0 to 4 08:14:41 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x2, 0x0, 0x0) 08:14:41 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x4000000, 0x0, 0x0) 08:14:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x7400}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 414.283135][T16562] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:41 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000402000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x7a00}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:41 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x5000000, 0x0, 0x0) 08:14:41 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 414.427357][T16596] loop4: detected capacity change from 0 to 4 08:14:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x8716}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 414.484654][T16596] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:41 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x6000000, 0x0, 0x0) 08:14:41 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x3, 0x0, 0x0) 08:14:41 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 414.541585][T16596] loop4: detected capacity change from 0 to 4 [ 414.564832][T16596] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000502000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xe0ffff}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:41 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x7000000, 0x0, 0x0) 08:14:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x1000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:41 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 414.696699][T16641] loop4: detected capacity change from 0 to 4 08:14:41 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x8000000, 0x0, 0x0) [ 414.741171][T16641] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x2000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:41 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r195 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r195, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:41 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x4, 0x0, 0x0) 08:14:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000602000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) [ 414.811953][T16641] loop4: detected capacity change from 0 to 4 [ 414.819692][T16641] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:41 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r195 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r195, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x3000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:41 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x9000000, 0x0, 0x0) 08:14:41 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:41 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r195 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r195, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x4000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 414.936290][T16676] loop4: detected capacity change from 0 to 4 [ 414.967860][T16676] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:41 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xa000000, 0x0, 0x0) [ 415.042783][T16676] loop4: detected capacity change from 0 to 4 [ 415.051716][T16676] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:42 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r195 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r195, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x5000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:42 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xb000000, 0x0, 0x0) 08:14:42 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x8, 0x0, 0x0) 08:14:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000702000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:42 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r195 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r195, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:42 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xc000000, 0x0, 0x0) 08:14:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x6000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:42 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 415.199739][T16729] loop4: detected capacity change from 0 to 4 08:14:42 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r195 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r195, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:42 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xd000000, 0x0, 0x0) 08:14:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x7000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 415.243241][T16729] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:42 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000802000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) [ 415.332134][T16729] loop4: detected capacity change from 0 to 4 [ 415.340023][T16729] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:42 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xe000000, 0x0, 0x0) 08:14:42 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xf, 0x0, 0x0) 08:14:42 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xf000000, 0x0, 0x0) 08:14:42 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x8000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:42 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 415.419856][T16776] loop4: detected capacity change from 0 to 4 [ 415.436003][T16776] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:42 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x10000000, 0x0, 0x0) [ 415.481422][T16776] loop4: detected capacity change from 0 to 4 [ 415.492353][T16776] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000902000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:42 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x9000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:42 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x11000000, 0x0, 0x0) 08:14:42 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r193 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r193, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r76}, {r64, r160}, {}, {}, {}, {r100, r108}, {r188, r102}, {r165}, {}, {}, {r158}, {}, {r50, r78}, {0x0, r35}, {0x0, r8}, {}, {r169}, {}, {r57, r176}, {r16}, {r129, r153}, {}, {r22}, {r182, r105}, {}, {}, {}, {}, {r72, r172}, {r143, r174}, {}, {0x0, r102}, {0x0, r24}, {r37}, {}, {r71}, {r51, r11}, {0x0, r47}, {r23, r139}, {}, {r180}, {r127}, {r4}, {}, {}, {r31}, {r31}, {r101}, {0x0, r177}, {}, {}, {}, {}, {0x0, r87}, {r64, r116}, {}, {r189}, {}, {r106, r120}, {0x0, r20}, {0x0, r151}, {r124, r135}, {0x0, r96}, {}, {}, {r70, r111}, {}, {r9, r157}, {r137}, {0x0, r45}, {r7, r42}, {0x0, r47}, {r146, r163}, {}, {0x0, r65}, {}, {r115, r28}, {}, {}, {r117, r130}, {0x0, r67}, {r34}, {r103}, {r92}, {0x0, r134}, {r31, r85}, {}, {}, {0x0, r32}, {}, {}, {r84}, {0x0, r44}, {0x0, r55}, {r152, r190}, {0x0, r80}, {0x0, r132}, {0x0, r32}, {r145}, {r25, r44}, {r118, r98}, {r175, r110}, {0x0, r52}, {}, {}, {r5}, {}, {r119, r94}, {r50}, {r69, r96}, {r21, r40}, {0x0, r94}, {0x0, r179}, {}, {}, {r33}, {r159, r154}, {r186}, {0x0, r78}, {r181}, {}, {r53, r148}, {}, {r99}, {r23, r86}, {r140, r66}, {0x0, r19}, {}, {}, {}, {r30, r191}, {r142, r126}, {}, {r137}, {r182}, {0x0, r13}, {0x0, r29}, {r48}, {r106, r114}, {0x0, r54}, {0x0, r121}, {r48, r125}, {}, {r88, r58}, {r184, r55}, {0x0, r149}, {r164}, {}, {r79, r27}, {r138, r47}, {0x0, r110}, {r95}, {0x0, r187}, {r18, r185}, {r39, r183}, {0x0, r114}, {}, {}, {r43, r17}, {}, {r48, r91}, {r43, r75}, {r131}, {}, {0x0, r96}, {r72}, {}, {r26, r66}, {r41, r47}, {0x0, r170}, {}, {r118, r56}, {}, {}, {0x0, r122}, {r68}, {r51}, {}, {}, {0x0, r85}, {r162, r93}, {r12, r59}, {0x0, r83}, {}, {}, {}, {r133, r90}, {r150, r81}, {r144}, {}, {0x0, r147}, {r84}, {r16}, {}, {0x0, r3}, {r46, r113}, {}, {r141}, {r60}, {0x0, r15}, {r133}, {r6}, {0x0, r155}, {}, {}, {0x0, r128}, {r10, r73}, {0x0, r77}, {}, {r14, r87}, {r171}, {r143, r36}, {r192}, {r161}, {}, {r82}, {}, {r39, r167}, {}, {r53}, {r97}, {}, {r2}, {r133}, {0x0, r166}, {r6}, {r62}, {0x0, r61}, {r74, r80}, {}, {}, {r156}, {}, {r107}, {}, {}, {0x0, r104}, {}, {}, {0x0, r178}, {r89}, {r173}, {r168, r112}, {}, {r123}, {0x0, r190}, {r136, r63}, {0x0, r55}, {r92}, {}, {r49, r109}, {0x0, r38}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:42 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 415.611575][T16814] loop4: detected capacity change from 0 to 4 [ 415.633833][T16814] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:42 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x11, 0x0, 0x0) 08:14:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xa000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000a02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:42 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r193 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r193, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r76}, {r64, r160}, {}, {}, {}, {r100, r108}, {r188, r102}, {r165}, {}, {}, {r158}, {}, {r50, r78}, {0x0, r35}, {0x0, r8}, {}, {r169}, {}, {r57, r176}, {r16}, {r129, r153}, {}, {r22}, {r182, r105}, {}, {}, {}, {}, {r72, r172}, {r143, r174}, {}, {0x0, r102}, {0x0, r24}, {r37}, {}, {r71}, {r51, r11}, {0x0, r47}, {r23, r139}, {}, {r180}, {r127}, {r4}, {}, {}, {r31}, {r31}, {r101}, {0x0, r177}, {}, {}, {}, {}, {0x0, r87}, {r64, r116}, {}, {r189}, {}, {r106, r120}, {0x0, r20}, {0x0, r151}, {r124, r135}, {0x0, r96}, {}, {}, {r70, r111}, {}, {r9, r157}, {r137}, {0x0, r45}, {r7, r42}, {0x0, r47}, {r146, r163}, {}, {0x0, r65}, {}, {r115, r28}, {}, {}, {r117, r130}, {0x0, r67}, {r34}, {r103}, {r92}, {0x0, r134}, {r31, r85}, {}, {}, {0x0, r32}, {}, {}, {r84}, {0x0, r44}, {0x0, r55}, {r152, r190}, {0x0, r80}, {0x0, r132}, {0x0, r32}, {r145}, {r25, r44}, {r118, r98}, {r175, r110}, {0x0, r52}, {}, {}, {r5}, {}, {r119, r94}, {r50}, {r69, r96}, {r21, r40}, {0x0, r94}, {0x0, r179}, {}, {}, {r33}, {r159, r154}, {r186}, {0x0, r78}, {r181}, {}, {r53, r148}, {}, {r99}, {r23, r86}, {r140, r66}, {0x0, r19}, {}, {}, {}, {r30, r191}, {r142, r126}, {}, {r137}, {r182}, {0x0, r13}, {0x0, r29}, {r48}, {r106, r114}, {0x0, r54}, {0x0, r121}, {r48, r125}, {}, {r88, r58}, {r184, r55}, {0x0, r149}, {r164}, {}, {r79, r27}, {r138, r47}, {0x0, r110}, {r95}, {0x0, r187}, {r18, r185}, {r39, r183}, {0x0, r114}, {}, {}, {r43, r17}, {}, {r48, r91}, {r43, r75}, {r131}, {}, {0x0, r96}, {r72}, {}, {r26, r66}, {r41, r47}, {0x0, r170}, {}, {r118, r56}, {}, {}, {0x0, r122}, {r68}, {r51}, {}, {}, {0x0, r85}, {r162, r93}, {r12, r59}, {0x0, r83}, {}, {}, {}, {r133, r90}, {r150, r81}, {r144}, {}, {0x0, r147}, {r84}, {r16}, {}, {0x0, r3}, {r46, r113}, {}, {r141}, {r60}, {0x0, r15}, {r133}, {r6}, {0x0, r155}, {}, {}, {0x0, r128}, {r10, r73}, {0x0, r77}, {}, {r14, r87}, {r171}, {r143, r36}, {r192}, {r161}, {}, {r82}, {}, {r39, r167}, {}, {r53}, {r97}, {}, {r2}, {r133}, {0x0, r166}, {r6}, {r62}, {0x0, r61}, {r74, r80}, {}, {}, {r156}, {}, {r107}, {}, {}, {0x0, r104}, {}, {}, {0x0, r178}, {r89}, {r173}, {r168, r112}, {}, {r123}, {0x0, r190}, {r136, r63}, {0x0, r55}, {r92}, {}, {r49, r109}, {0x0, r38}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:42 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x12000000, 0x0, 0x0) 08:14:42 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x13000000, 0x0, 0x0) 08:14:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xb000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:42 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xc0, 0x0, 0x0) [ 415.746909][T16837] loop4: detected capacity change from 0 to 4 08:14:42 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r193 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r193, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r76}, {r64, r160}, {}, {}, {}, {r100, r108}, {r188, r102}, {r165}, {}, {}, {r158}, {}, {r50, r78}, {0x0, r35}, {0x0, r8}, {}, {r169}, {}, {r57, r176}, {r16}, {r129, r153}, {}, {r22}, {r182, r105}, {}, {}, {}, {}, {r72, r172}, {r143, r174}, {}, {0x0, r102}, {0x0, r24}, {r37}, {}, {r71}, {r51, r11}, {0x0, r47}, {r23, r139}, {}, {r180}, {r127}, {r4}, {}, {}, {r31}, {r31}, {r101}, {0x0, r177}, {}, {}, {}, {}, {0x0, r87}, {r64, r116}, {}, {r189}, {}, {r106, r120}, {0x0, r20}, {0x0, r151}, {r124, r135}, {0x0, r96}, {}, {}, {r70, r111}, {}, {r9, r157}, {r137}, {0x0, r45}, {r7, r42}, {0x0, r47}, {r146, r163}, {}, {0x0, r65}, {}, {r115, r28}, {}, {}, {r117, r130}, {0x0, r67}, {r34}, {r103}, {r92}, {0x0, r134}, {r31, r85}, {}, {}, {0x0, r32}, {}, {}, {r84}, {0x0, r44}, {0x0, r55}, {r152, r190}, {0x0, r80}, {0x0, r132}, {0x0, r32}, {r145}, {r25, r44}, {r118, r98}, {r175, r110}, {0x0, r52}, {}, {}, {r5}, {}, {r119, r94}, {r50}, {r69, r96}, {r21, r40}, {0x0, r94}, {0x0, r179}, {}, {}, {r33}, {r159, r154}, {r186}, {0x0, r78}, {r181}, {}, {r53, r148}, {}, {r99}, {r23, r86}, {r140, r66}, {0x0, r19}, {}, {}, {}, {r30, r191}, {r142, r126}, {}, {r137}, {r182}, {0x0, r13}, {0x0, r29}, {r48}, {r106, r114}, {0x0, r54}, {0x0, r121}, {r48, r125}, {}, {r88, r58}, {r184, r55}, {0x0, r149}, {r164}, {}, {r79, r27}, {r138, r47}, {0x0, r110}, {r95}, {0x0, r187}, {r18, r185}, {r39, r183}, {0x0, r114}, {}, {}, {r43, r17}, {}, {r48, r91}, {r43, r75}, {r131}, {}, {0x0, r96}, {r72}, {}, {r26, r66}, {r41, r47}, {0x0, r170}, {}, {r118, r56}, {}, {}, {0x0, r122}, {r68}, {r51}, {}, {}, {0x0, r85}, {r162, r93}, {r12, r59}, {0x0, r83}, {}, {}, {}, {r133, r90}, {r150, r81}, {r144}, {}, {0x0, r147}, {r84}, {r16}, {}, {0x0, r3}, {r46, r113}, {}, {r141}, {r60}, {0x0, r15}, {r133}, {r6}, {0x0, r155}, {}, {}, {0x0, r128}, {r10, r73}, {0x0, r77}, {}, {r14, r87}, {r171}, {r143, r36}, {r192}, {r161}, {}, {r82}, {}, {r39, r167}, {}, {r53}, {r97}, {}, {r2}, {r133}, {0x0, r166}, {r6}, {r62}, {0x0, r61}, {r74, r80}, {}, {}, {r156}, {}, {r107}, {}, {}, {0x0, r104}, {}, {}, {0x0, r178}, {r89}, {r173}, {r168, r112}, {}, {r123}, {0x0, r190}, {r136, r63}, {0x0, r55}, {r92}, {}, {r49, r109}, {0x0, r38}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:42 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 415.803327][T16837] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:42 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x14000000, 0x0, 0x0) 08:14:42 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xc000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:42 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x300, 0x0, 0x0) [ 415.875655][T16837] loop4: detected capacity change from 0 to 4 [ 415.901557][T16837] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 415.976777][T16867] ================================================================== [ 415.985051][T16867] BUG: KCSAN: data-race in sock_alloc_send_pskb / unix_shutdown [ 415.992790][T16867] [ 415.995112][T16867] write to 0xffff888106217270 of 1 bytes by task 16887 on cpu 1: [ 416.003004][T16867] unix_shutdown+0x78/0x3b0 [ 416.007488][T16867] __se_sys_shutdown+0xf6/0x140 [ 416.012420][T16867] __x64_sys_shutdown+0x2d/0x40 [ 416.017275][T16867] do_syscall_64+0x3d/0x90 [ 416.021678][T16867] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 416.027558][T16867] [ 416.029872][T16867] read to 0xffff888106217270 of 1 bytes by task 16867 on cpu 0: [ 416.037479][T16867] sock_alloc_send_pskb+0x113/0x4e0 [ 416.042829][T16867] unix_dgram_sendmsg+0x478/0x1600 [ 416.047931][T16867] unix_seqpacket_sendmsg+0xcc/0x110 [ 416.053201][T16867] ____sys_sendmsg+0x360/0x4d0 [ 416.057948][T16867] __sys_sendmsg_sock+0x25/0x30 [ 416.062899][T16867] io_issue_sqe+0x206d/0x64b0 [ 416.067567][T16867] __io_queue_sqe+0xe7/0x360 [ 416.072147][T16867] io_submit_sqe+0x1695/0x3400 [ 416.076889][T16867] io_submit_sqes+0x822/0xe50 [ 416.081546][T16867] __se_sys_io_uring_enter+0x213/0xae0 [ 416.087007][T16867] __x64_sys_io_uring_enter+0x74/0x80 [ 416.092357][T16867] do_syscall_64+0x3d/0x90 [ 416.096753][T16867] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 416.102624][T16867] [ 416.104925][T16867] value changed: 0x00 -> 0x01 [ 416.109659][T16867] [ 416.111976][T16867] Reported by Kernel Concurrency Sanitizer on: 08:14:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000b02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:43 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x15000000, 0x0, 0x0) 08:14:43 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xd000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:43 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xf00, 0x0, 0x0) [ 416.118098][T16867] CPU: 0 PID: 16867 Comm: syz-executor.2 Tainted: G W 5.14.0-rc7-syzkaller #0 [ 416.128222][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.138256][T16867] ================================================================== 08:14:43 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0xe000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:43 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1100, 0x0, 0x0) 08:14:43 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:43 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x16000000, 0x0, 0x0) [ 416.220875][T16900] loop4: detected capacity change from 0 to 4 [ 416.253504][T16900] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x10000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:43 executing program 5: r0 = syz_io_uring_setup(0x21c, 0x0, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 416.308329][T16900] loop4: detected capacity change from 0 to 4 [ 416.323445][T16900] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000c02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:43 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:43 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x17000000, 0x0, 0x0) 08:14:43 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x2000, 0x0, 0x0) 08:14:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x11000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:43 executing program 5: r0 = syz_io_uring_setup(0x21c, 0x0, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:43 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x18000000, 0x0, 0x0) 08:14:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x12000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000d02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) [ 416.450796][T16950] loop4: detected capacity change from 0 to 4 [ 416.470173][T16950] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:43 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x3e80, 0x0, 0x0) 08:14:43 executing program 5: r0 = syz_io_uring_setup(0x21c, 0x0, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r196 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r196, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r79}, {r67, r163}, {}, {}, {}, {r103, r111}, {r191, r105}, {r168}, {}, {}, {r161}, {}, {r53, r81}, {0x0, r38}, {0x0, r11}, {}, {r172}, {}, {r60, r179}, {r19}, {r132, r156}, {}, {r25}, {r185, r108}, {}, {}, {}, {}, {r75, r175}, {r146, r177}, {}, {0x0, r105}, {0x0, r27}, {r40}, {}, {r74}, {r54, r14}, {0x0, r50}, {r26, r142}, {}, {r183}, {r130}, {r7}, {}, {}, {r34}, {r34}, {r104}, {0x0, r180}, {}, {}, {}, {}, {0x0, r90}, {r67, r119}, {}, {r192}, {}, {r109, r123}, {0x0, r23}, {0x0, r154}, {r127, r138}, {0x0, r99}, {}, {}, {r73, r114}, {}, {r12, r160}, {r140}, {0x0, r48}, {r10, r45}, {0x0, r50}, {r149, r166}, {}, {0x0, r68}, {}, {r118, r31}, {}, {}, {r120, r133}, {0x0, r70}, {r37}, {r106}, {r95}, {0x0, r137}, {r34, r88}, {}, {}, {0x0, r35}, {}, {}, {r87}, {0x0, r47}, {0x0, r58}, {r155, r193}, {0x0, r83}, {0x0, r135}, {0x0, r35}, {r148}, {r28, r47}, {r121, r101}, {r178, r113}, {0x0, r55}, {}, {}, {r8}, {}, {r122, r97}, {r53}, {r72, r99}, {r24, r43}, {0x0, r97}, {0x0, r182}, {}, {}, {r36}, {r162, r157}, {r189}, {0x0, r81}, {r184}, {}, {r56, r151}, {}, {r102}, {r26, r89}, {r143, r69}, {0x0, r22}, {}, {}, {}, {r33, r194}, {r145, r129}, {}, {r140}, {r185}, {0x0, r16}, {0x0, r32}, {r51}, {r109, r117}, {0x0, r57}, {0x0, r124}, {r51, r128}, {}, {r91, r61}, {r187, r58}, {0x0, r152}, {r167}, {}, {r82, r30}, {r141, r50}, {0x0, r113}, {r98}, {0x0, r190}, {r21, r188}, {r42, r186}, {0x0, r117}, {}, {}, {r46, r20}, {}, {r51, r94}, {r46, r78}, {r134}, {}, {0x0, r99}, {r75}, {}, {r29, r69}, {r44, r50}, {0x0, r173}, {}, {r121, r59}, {}, {}, {0x0, r125}, {r71}, {r54}, {}, {}, {0x0, r88}, {r165, r96}, {r15, r62}, {0x0, r86}, {}, {}, {}, {r136, r93}, {r153, r84}, {r147}, {}, {0x0, r150}, {r87}, {r19}, {}, {0x0, r6}, {r49, r116}, {}, {r144}, {r63}, {0x0, r18}, {r136}, {r9}, {0x0, r158}, {}, {}, {0x0, r131}, {r13, r76}, {0x0, r80}, {}, {r17, r90}, {r174}, {r146, r39}, {r195}, {r164}, {}, {r85}, {}, {r42, r170}, {}, {r56}, {r100}, {}, {r5}, {r136}, {0x0, r169}, {r9}, {r65}, {0x0, r64}, {r77, r83}, {}, {}, {r159}, {}, {r110}, {}, {}, {0x0, r107}, {}, {}, {0x0, r181}, {r92}, {r176}, {r171, r115}, {}, {r126}, {0x0, r193}, {r139, r66}, {0x0, r58}, {r95}, {}, {r52, r112}, {0x0, r41}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:43 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x19000000, 0x0, 0x0) 08:14:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x1c030000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:43 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:43 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(0x0, r1, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r195 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r195, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 416.572185][T16973] loop4: detected capacity change from 0 to 4 [ 416.606023][T16973] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:43 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1a000000, 0x0, 0x0) 08:14:43 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x3ec0, 0x0, 0x0) 08:14:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000e02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:43 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(0x0, r1, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r195 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r195, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x20000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) 08:14:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x25000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 416.706156][T17001] loop4: detected capacity change from 0 to 4 [ 416.725731][T17001] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:43 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1b000000, 0x0, 0x0) 08:14:43 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(0x0, r1, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r195 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r195, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:43 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x803e, 0x0, 0x0) [ 416.778942][T17001] loop4: detected capacity change from 0 to 4 [ 416.794584][T17001] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:43 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1c000000, 0x0, 0x0) 08:14:43 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:43 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xc000, 0x0, 0x0) 08:14:43 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1d000000, 0x0, 0x0) 08:14:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x48000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 416.873568][ C0] scsi_io_completion_action: 45 callbacks suppressed [ 416.873592][ C0] sd 0:0:1:0: [sg0] tag#5306 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 416.890684][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB: opcode=0xe5 (vendor) [ 416.897654][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 416.907236][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 416.916866][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[20]: ba 08:14:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000f02000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:43 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r195 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r195, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) [ 416.978069][ C1] sd 0:0:1:0: [sg0] tag#5307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 416.988568][ C1] sd 0:0:1:0: [sg0] tag#5307 CDB: opcode=0xe5 (vendor) [ 416.995430][ C1] sd 0:0:1:0: [sg0] tag#5307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 417.005090][ C1] sd 0:0:1:0: [sg0] tag#5307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 417.014643][ C1] sd 0:0:1:0: [sg0] tag#5307 CDB[20]: ba 08:14:43 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0xc03e, 0x0, 0x0) 08:14:43 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1e000000, 0x0, 0x0) 08:14:44 executing program 5: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054300)={0xbab, [{0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}], 0x8, "7e6830ead6b793"}) syz_io_uring_submit(r1, 0x0, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2500}}, 0x80) r195 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r195, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [{r78}, {r66, r162}, {}, {}, {}, {r102, r110}, {r190, r104}, {r167}, {}, {}, {r160}, {}, {r52, r80}, {0x0, r37}, {0x0, r10}, {}, {r171}, {}, {r59, r178}, {r18}, {r131, r155}, {}, {r24}, {r184, r107}, {}, {}, {}, {}, {r74, r174}, {r145, r176}, {}, {0x0, r104}, {0x0, r26}, {r39}, {}, {r73}, {r53, r13}, {0x0, r49}, {r25, r141}, {}, {r182}, {r129}, {r6}, {}, {}, {r33}, {r33}, {r103}, {0x0, r179}, {}, {}, {}, {}, {0x0, r89}, {r66, r118}, {}, {r191}, {}, {r108, r122}, {0x0, r22}, {0x0, r153}, {r126, r137}, {0x0, r98}, {}, {}, {r72, r113}, {}, {r11, r159}, {r139}, {0x0, r47}, {r9, r44}, {0x0, r49}, {r148, r165}, {}, {0x0, r67}, {}, {r117, r30}, {}, {}, {r119, r132}, {0x0, r69}, {r36}, {r105}, {r94}, {0x0, r136}, {r33, r87}, {}, {}, {0x0, r34}, {}, {}, {r86}, {0x0, r46}, {0x0, r57}, {r154, r192}, {0x0, r82}, {0x0, r134}, {0x0, r34}, {r147}, {r27, r46}, {r120, r100}, {r177, r112}, {0x0, r54}, {}, {}, {r7}, {}, {r121, r96}, {r52}, {r71, r98}, {r23, r42}, {0x0, r96}, {0x0, r181}, {}, {}, {r35}, {r161, r156}, {r188}, {0x0, r80}, {r183}, {}, {r55, r150}, {}, {r101}, {r25, r88}, {r142, r68}, {0x0, r21}, {}, {}, {}, {r32, r193}, {r144, r128}, {}, {r139}, {r184}, {0x0, r15}, {0x0, r31}, {r50}, {r108, r116}, {0x0, r56}, {0x0, r123}, {r50, r127}, {}, {r90, r60}, {r186, r57}, {0x0, r151}, {r166}, {}, {r81, r29}, {r140, r49}, {0x0, r112}, {r97}, {0x0, r189}, {r20, r187}, {r41, r185}, {0x0, r116}, {}, {}, {r45, r19}, {}, {r50, r93}, {r45, r77}, {r133}, {}, {0x0, r98}, {r74}, {}, {r28, r68}, {r43, r49}, {0x0, r172}, {}, {r120, r58}, {}, {}, {0x0, r124}, {r70}, {r53}, {}, {}, {0x0, r87}, {r164, r95}, {r14, r61}, {0x0, r85}, {}, {}, {}, {r135, r92}, {r152, r83}, {r146}, {}, {0x0, r149}, {r86}, {r18}, {}, {0x0, r5}, {r48, r115}, {}, {r143}, {r62}, {0x0, r17}, {r135}, {r8}, {0x0, r157}, {}, {}, {0x0, r130}, {r12, r75}, {0x0, r79}, {}, {r16, r89}, {r173}, {r145, r38}, {r194}, {r163}, {}, {r84}, {}, {r41, r169}, {}, {r55}, {r99}, {}, {r4}, {r135}, {0x0, r168}, {r8}, {r64}, {0x0, r63}, {r76, r82}, {}, {}, {r158}, {}, {r109}, {}, {}, {0x0, r106}, {}, {}, {0x0, r180}, {r91}, {r175}, {r170, r114}, {}, {r125}, {0x0, r192}, {r138, r65}, {0x0, r57}, {r94}, {}, {r51, r111}, {0x0, r40}], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) 08:14:44 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x1f000000, 0x0, 0x0) [ 417.020170][ C0] sd 0:0:1:0: [sg0] tag#5308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 417.030604][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB: opcode=0xe5 (vendor) [ 417.037490][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 417.047060][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 417.053255][T17056] loop4: detected capacity change from 0 to 4 [ 417.056625][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[20]: ba 08:14:44 executing program 1: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x33fe0, 0x0, 0x0) 08:14:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019008f480000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000, 0x0, 0x20000005}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0x36c, 0x14, 0x1, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x6}, {0x3f000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000001000000, 0x4c000000}, {0x100000000000b14, 0x0, 0x1}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}, @algo_auth_trunc={0x86, 0x14, {{'nhpoly1305\x00'}, 0x1d0, 0x40, "78f33b65fb64098b8253c031da76621ee71bb88340b0e7b57d487e7c11d0488b70ecda7163668e5164d86c51eb169036ce7be4d578a5a8692016"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4941}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x1, 0x4e20, 0x8001, 0x2, 0x120, 0x20}, {@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, @in=@multicast1, {0x40, 0x1ff, 0x7f, 0x80000003, 0x0, 0xb4, 0x7fff, 0xb7}, {0x0, 0x1, 0x1000000000040}, {0x5, 0x4, 0x8}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x5}}, @algo_auth_trunc={0x10b, 0x14, {{'sha224-avx\x00'}, 0x5f8, 0x100, "4786af90e40333a6c16320b31654e530ddaed05d4e7503f6c3b7e3fe9067075e8c2de7c385374fb52006df13fecfad261b4af8f071e3022f48e53868d431f80efec944345134297e30dcd6f3071f7c3fdc381cc3ef885e2604606ce7694e0a789681bb1193a93b4efc95006a1fc9e3137acc636cf27581f481f584e848e6a5765322d7073ff49392402581ee460afbf62e6fb1e0789106bfa7f91ceaff629cf731c356a057eb568cb57508dfc2df1eda639d85c29925f4808d630f85359953"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x7}, @tfcpad={0x8, 0x16, 0xfb}]}, 0x36c}, 0x1, 0xfffff000, 0x0, 0x4001}, 0x800) [ 417.115620][ C0] sd 0:0:1:0: [sg0] tag#5309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 417.126205][ C0] sd 0:0:1:0: [sg0] tag#5309 CDB: opcode=0xe5 (vendor) [ 417.133189][ C0] sd 0:0:1:0: [sg0] tag#5309 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 417.142762][ C0] sd 0:0:1:0: [sg0] tag#5309 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 417.152341][ C0] sd 0:0:1:0: [sg0] tag#5309 CDB[20]: ba [ 417.158215][T17056] EXT4-fs (loop4): Invalid want_extra_isize 0 08:14:44 executing program 2: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002ec0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2500}}, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051580)={0x101, [], 0x0, "35dc30a6de25c4"}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 08:14:44 executing program 3: r0 = syz_io_uring_setup(0x21c, &(0x7f0000000000), &(0x7f00006d3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x20000000, 0x0, 0x0) 08:14:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}]}) 08:14:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[