e74484fcdf468f95b481a59000000"]) 09:07:47 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"]) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x8000, 0x24) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49c6, &(0x7f0000000380)={0x0, 0x5265, 0x2, 0xffffffff, 0x11b}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000002c0)) dup(r4) sendfile(r2, r3, 0x0, 0x100000001) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 09:07:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xa}) 09:07:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000020000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:07:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:07:47 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0, 0xf0ff7f00000000}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:07:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a}], 0x0, &(0x7f00000003c0)={[{@stripe={'stripe', 0x3d, 0x9}}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}) [ 1243.401620] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1243.404325] kauditd_printk_skb: 4 callbacks suppressed [ 1243.404344] audit: type=1326 audit(1749460067.194:1549): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8476 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1243.413095] audit: type=1326 audit(1749460067.194:1550): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8476 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:07:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000030000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1243.448005] audit: type=1326 audit(1749460067.238:1551): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8476 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1243.467682] FAULT_INJECTION: forcing a failure. [ 1243.467682] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.470726] CPU: 0 PID: 8491 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1243.472269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.474145] Call Trace: [ 1243.474754] dump_stack+0x107/0x167 [ 1243.475580] should_fail.cold+0x5/0xa [ 1243.476444] ? relay_open+0xb3/0xa10 [ 1243.477300] should_failslab+0x5/0x20 [ 1243.478174] kmem_cache_alloc_trace+0x55/0x320 [ 1243.479216] ? do_raw_spin_unlock+0x4f/0x220 [ 1243.480220] relay_open+0xb3/0xa10 [ 1243.481050] do_blk_trace_setup+0x4cf/0xc10 [ 1243.482045] ? _copy_from_user+0xfb/0x1b0 [ 1243.482992] __blk_trace_setup+0xca/0x180 [ 1243.483936] ? do_blk_trace_setup+0xc10/0xc10 [ 1243.484971] blk_trace_ioctl+0x155/0x290 [ 1243.485901] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1243.487012] ? do_vfs_ioctl+0x283/0x10d0 [ 1243.487947] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1243.489140] ? generic_block_fiemap+0x60/0x60 [ 1243.490176] ? lock_downgrade+0x6d0/0x6d0 [ 1243.491125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1243.492227] blkdev_ioctl+0xc1/0x710 [ 1243.493079] ? blkdev_common_ioctl+0x1930/0x1930 [ 1243.494177] ? selinux_file_ioctl+0xb6/0x270 [ 1243.495182] block_ioctl+0xf9/0x140 [ 1243.496008] ? blkdev_read_iter+0x1c0/0x1c0 [ 1243.496988] __x64_sys_ioctl+0x19a/0x210 [ 1243.497939] do_syscall_64+0x33/0x40 [ 1243.498790] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.499942] RIP: 0033:0x7f805ff83b19 [ 1243.500789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.504912] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1243.506635] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1243.508234] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1243.509848] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1243.511457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1243.513069] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1243.519599] audit: type=1326 audit(1749460067.238:1552): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8476 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1243.563264] audit: type=1326 audit(1749460067.241:1553): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8476 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1243.565977] audit: type=1326 audit(1749460067.241:1554): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8476 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:07:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:07:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000090000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:07:47 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 23) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1243.590980] audit: type=1326 audit(1749460067.241:1555): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8476 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:07:47 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1243.606714] audit: type=1326 audit(1749460067.241:1556): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8476 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1243.617140] loop0: detected capacity change from 0 to 2048 [ 1243.626588] audit: type=1326 audit(1749460067.241:1557): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8476 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1243.639776] audit: type=1326 audit(1749460067.241:1558): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8476 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:07:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:07:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000d0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:07:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:07:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1243.740618] FAULT_INJECTION: forcing a failure. [ 1243.740618] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.742873] CPU: 1 PID: 8516 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1243.743658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.744598] Call Trace: [ 1243.744909] dump_stack+0x107/0x167 [ 1243.745329] should_fail.cold+0x5/0xa [ 1243.745773] ? create_object.isra.0+0x3a/0xa20 [ 1243.746296] should_failslab+0x5/0x20 [ 1243.746732] kmem_cache_alloc+0x5b/0x310 [ 1243.747197] create_object.isra.0+0x3a/0xa20 [ 1243.747703] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.748280] kmem_cache_alloc_trace+0x151/0x320 [ 1243.748819] relay_open+0xb3/0xa10 [ 1243.749353] do_blk_trace_setup+0x4cf/0xc10 [ 1243.749948] ? _copy_from_user+0xfb/0x1b0 [ 1243.750417] __blk_trace_setup+0xca/0x180 [ 1243.751012] ? do_blk_trace_setup+0xc10/0xc10 [ 1243.751731] blk_trace_ioctl+0x155/0x290 [ 1243.752203] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1243.752759] ? do_vfs_ioctl+0x283/0x10d0 [ 1243.753225] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1243.753825] ? generic_block_fiemap+0x60/0x60 [ 1243.754339] ? lock_downgrade+0x6d0/0x6d0 [ 1243.754806] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1243.755368] blkdev_ioctl+0xc1/0x710 [ 1243.755790] ? blkdev_common_ioctl+0x1930/0x1930 [ 1243.756335] ? selinux_file_ioctl+0xb6/0x270 [ 1243.756836] block_ioctl+0xf9/0x140 [ 1243.757252] ? blkdev_read_iter+0x1c0/0x1c0 [ 1243.757747] __x64_sys_ioctl+0x19a/0x210 [ 1243.758217] do_syscall_64+0x33/0x40 [ 1243.758641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.759222] RIP: 0033:0x7f805ff83b19 [ 1243.759643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.761873] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1243.762737] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1243.763547] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1243.764358] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1243.765165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1243.765979] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1243.789759] loop0: detected capacity change from 0 to 2048 09:08:00 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x40801, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x71c7, 0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2a4}, r1, 0x10, r0, 0x2) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4485ddcaefb25719, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x400242, 0x0) ftruncate(r2, 0x2) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write(r3, &(0x7f0000000240)='e', 0x1) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3}) 09:08:00 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:08:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000e0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:08:00 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0, 0xf0ffffff7f0000}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:08:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:08:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:08:00 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 24) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:08:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xd}) [ 1256.268433] loop0: detected capacity change from 0 to 2048 [ 1256.288270] FAULT_INJECTION: forcing a failure. [ 1256.288270] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.290005] CPU: 0 PID: 8533 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1256.290995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1256.292185] Call Trace: [ 1256.292563] dump_stack+0x107/0x167 [ 1256.293085] should_fail.cold+0x5/0xa [ 1256.293626] ? create_object.isra.0+0x3a/0xa20 [ 1256.294285] should_failslab+0x5/0x20 [ 1256.294826] kmem_cache_alloc+0x5b/0x310 [ 1256.295404] create_object.isra.0+0x3a/0xa20 [ 1256.296045] kmemleak_alloc_percpu+0xa0/0x100 [ 1256.296692] pcpu_alloc+0x4e2/0x1240 [ 1256.297230] relay_open+0xd8/0xa10 [ 1256.297740] do_blk_trace_setup+0x4cf/0xc10 [ 1256.298367] ? _copy_from_user+0xfb/0x1b0 [ 1256.298950] __blk_trace_setup+0xca/0x180 [ 1256.299541] ? do_blk_trace_setup+0xc10/0xc10 [ 1256.300191] blk_trace_ioctl+0x155/0x290 [ 1256.300765] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1256.301473] ? do_vfs_ioctl+0x283/0x10d0 [ 1256.302053] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1256.302797] ? generic_block_fiemap+0x60/0x60 [ 1256.303431] ? lock_downgrade+0x6d0/0x6d0 [ 1256.304020] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1256.304707] blkdev_ioctl+0xc1/0x710 [ 1256.305223] ? blkdev_common_ioctl+0x1930/0x1930 [ 1256.305907] ? selinux_file_ioctl+0xb6/0x270 [ 1256.306525] block_ioctl+0xf9/0x140 [ 1256.307035] ? blkdev_read_iter+0x1c0/0x1c0 [ 1256.307651] __x64_sys_ioctl+0x19a/0x210 [ 1256.308213] do_syscall_64+0x33/0x40 [ 1256.308747] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1256.309457] RIP: 0033:0x7f805ff83b19 [ 1256.309997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1256.312607] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.313687] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1256.314700] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1256.315724] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1256.316742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1256.317741] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1256.376551] kauditd_printk_skb: 20 callbacks suppressed [ 1256.376579] audit: type=1326 audit(1749460080.167:1579): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8540 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1256.381151] audit: type=1326 audit(1749460080.167:1580): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8540 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1256.384461] audit: type=1326 audit(1749460080.167:1581): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8540 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1256.398628] audit: type=1326 audit(1749460080.183:1582): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8540 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:08:00 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 25) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1256.417338] audit: type=1326 audit(1749460080.183:1583): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8540 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1256.426836] audit: type=1326 audit(1749460080.184:1584): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8540 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1256.438520] audit: type=1326 audit(1749460080.184:1585): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8540 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1256.467351] audit: type=1326 audit(1749460080.184:1586): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8540 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1256.483049] audit: type=1326 audit(1749460080.184:1587): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8540 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1256.486530] FAULT_INJECTION: forcing a failure. [ 1256.486530] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.488038] CPU: 0 PID: 8555 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1256.488802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1256.489732] Call Trace: [ 1256.490043] dump_stack+0x107/0x167 [ 1256.490452] should_fail.cold+0x5/0xa [ 1256.490879] ? create_object.isra.0+0x3a/0xa20 [ 1256.491403] should_failslab+0x5/0x20 [ 1256.491830] kmem_cache_alloc+0x5b/0x310 [ 1256.492288] ? mark_held_locks+0x9e/0xe0 [ 1256.492748] create_object.isra.0+0x3a/0xa20 [ 1256.493249] kmemleak_alloc_percpu+0xa0/0x100 [ 1256.493760] pcpu_alloc+0x4e2/0x1240 [ 1256.494196] relay_open+0xd8/0xa10 [ 1256.494616] do_blk_trace_setup+0x4cf/0xc10 [ 1256.495103] ? _copy_from_user+0xfb/0x1b0 [ 1256.495566] __blk_trace_setup+0xca/0x180 [ 1256.496032] ? do_blk_trace_setup+0xc10/0xc10 [ 1256.496546] blk_trace_ioctl+0x155/0x290 [ 1256.497002] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1256.497550] ? do_vfs_ioctl+0x283/0x10d0 [ 1256.498016] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1256.498606] ? generic_block_fiemap+0x60/0x60 [ 1256.499128] ? lock_downgrade+0x6d0/0x6d0 [ 1256.499589] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1256.500132] blkdev_ioctl+0xc1/0x710 [ 1256.500548] ? blkdev_common_ioctl+0x1930/0x1930 [ 1256.501082] ? selinux_file_ioctl+0xb6/0x270 [ 1256.501582] block_ioctl+0xf9/0x140 [ 1256.502003] ? blkdev_read_iter+0x1c0/0x1c0 [ 1256.502495] __x64_sys_ioctl+0x19a/0x210 [ 1256.502952] do_syscall_64+0x33/0x40 [ 1256.503379] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1256.503961] RIP: 0033:0x7f805ff83b19 [ 1256.504377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1256.506440] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.507292] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1256.508098] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1256.508905] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1256.509704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1256.510509] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1256.514014] audit: type=1326 audit(1749460080.194:1588): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8540 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1270.136816] FAULT_INJECTION: forcing a failure. [ 1270.136816] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.139864] CPU: 0 PID: 8562 Comm: syz-executor.4 Not tainted 5.10.238 #1 09:08:13 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 26) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:08:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xe}) 09:08:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@stripe={'stripe', 0x3d, 0x9}}]}) 09:08:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:08:13 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x200102, 0x190) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x400000000002, 0xffffffff, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x20010, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec46065bf6e5c2fd748b7382cb035aee7d0767500"/86]}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000380)=0x1e) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000003c0)={0x0, 0x2560, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 09:08:13 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0, 0x100000000000000}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:08:13 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:08:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000fffffff50000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1270.139898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1270.139904] Call Trace: [ 1270.139929] dump_stack+0x107/0x167 [ 1270.139951] should_fail.cold+0x5/0xa [ 1270.139973] ? relay_open_buf.part.0+0x91/0xc00 [ 1270.139996] should_failslab+0x5/0x20 [ 1270.140015] kmem_cache_alloc_trace+0x55/0x320 [ 1270.140041] relay_open_buf.part.0+0x91/0xc00 [ 1270.140065] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1270.140092] relay_open+0x531/0xa10 [ 1270.140120] do_blk_trace_setup+0x4cf/0xc10 [ 1270.140141] ? _copy_from_user+0xfb/0x1b0 [ 1270.140163] __blk_trace_setup+0xca/0x180 [ 1270.140182] ? do_blk_trace_setup+0xc10/0xc10 [ 1270.140226] blk_trace_ioctl+0x155/0x290 [ 1270.140246] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1270.140263] ? do_vfs_ioctl+0x283/0x10d0 [ 1270.140282] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1270.140302] ? generic_block_fiemap+0x60/0x60 [ 1270.140320] ? lock_downgrade+0x6d0/0x6d0 [ 1270.140339] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1270.140364] blkdev_ioctl+0xc1/0x710 [ 1270.140384] ? blkdev_common_ioctl+0x1930/0x1930 [ 1270.140407] ? selinux_file_ioctl+0xb6/0x270 [ 1270.140431] block_ioctl+0xf9/0x140 [ 1270.140448] ? blkdev_read_iter+0x1c0/0x1c0 [ 1270.140470] __x64_sys_ioctl+0x19a/0x210 [ 1270.140492] do_syscall_64+0x33/0x40 [ 1270.140511] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1270.140524] RIP: 0033:0x7f805ff83b19 [ 1270.140541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1270.140552] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1270.140573] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1270.140583] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1270.140594] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1270.140605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1270.140615] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1270.163769] loop0: detected capacity change from 0 to 2048 [ 1270.216649] kauditd_printk_skb: 4 callbacks suppressed [ 1270.216668] audit: type=1326 audit(1749460094.007:1593): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8563 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1270.225004] audit: type=1326 audit(1749460094.007:1594): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8563 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1270.227986] audit: type=1326 audit(1749460094.008:1595): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8563 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1270.231156] audit: type=1326 audit(1749460094.016:1596): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8563 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1270.234213] audit: type=1326 audit(1749460094.016:1597): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8563 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1270.234300] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1270.237228] audit: type=1326 audit(1749460094.016:1598): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8563 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1270.244820] audit: type=1326 audit(1749460094.034:1599): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8563 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1270.258568] audit: type=1326 audit(1749460094.039:1600): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8563 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1270.261941] audit: type=1326 audit(1749460094.039:1601): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8563 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:08:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000fffffff0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1270.266989] audit: type=1326 audit(1749460094.039:1602): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8563 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:08:14 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 27) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:08:14 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:08:14 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0, 0x200000000000000}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1270.368464] FAULT_INJECTION: forcing a failure. [ 1270.368464] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.370051] CPU: 0 PID: 8587 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1270.370933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1270.371993] Call Trace: [ 1270.372335] dump_stack+0x107/0x167 09:08:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000ffffffff0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1270.372803] should_fail.cold+0x5/0xa [ 1270.373352] ? create_object.isra.0+0x3a/0xa20 [ 1270.373937] should_failslab+0x5/0x20 [ 1270.374431] kmem_cache_alloc+0x5b/0x310 [ 1270.374948] ? __mutex_lock+0x4fe/0x10b0 [ 1270.375464] create_object.isra.0+0x3a/0xa20 [ 1270.376019] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1270.376663] kmem_cache_alloc_trace+0x151/0x320 [ 1270.377262] relay_open_buf.part.0+0x91/0xc00 [ 1270.377837] ? _find_next_bit.constprop.0+0x1a3/0x200 09:08:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@stripe={'stripe', 0x3d, 0x9}}]}) [ 1270.378506] relay_open+0x531/0xa10 [ 1270.379022] do_blk_trace_setup+0x4cf/0xc10 [ 1270.379573] ? _copy_from_user+0xfb/0x1b0 [ 1270.380100] __blk_trace_setup+0xca/0x180 [ 1270.380626] ? do_blk_trace_setup+0xc10/0xc10 [ 1270.381213] blk_trace_ioctl+0x155/0x290 [ 1270.381727] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1270.382388] blkdev_ioctl+0xc1/0x710 [ 1270.382861] ? blkdev_common_ioctl+0x1930/0x1930 [ 1270.383465] ? selinux_file_ioctl+0xb6/0x270 [ 1270.384029] block_ioctl+0xf9/0x140 [ 1270.384492] ? blkdev_read_iter+0x1c0/0x1c0 [ 1270.385048] __x64_sys_ioctl+0x19a/0x210 [ 1270.385579] do_syscall_64+0x33/0x40 [ 1270.386068] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1270.386724] RIP: 0033:0x7f805ff83b19 [ 1270.387204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1270.389543] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1270.390510] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1270.391411] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1270.392313] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1270.393219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1270.394124] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 09:08:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xf}) [ 1270.417285] loop0: detected capacity change from 0 to 2048 [ 1270.445258] EXT4-fs (loop0): Can't read superblock on 2nd try 09:08:14 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:08:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:08:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@stripe={'stripe', 0x3d, 0x9}}]}) 09:08:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00020000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:08:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:08:27 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1283.664700] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1283.665948] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1283.672556] kauditd_printk_skb: 32 callbacks suppressed [ 1283.672574] audit: type=1326 audit(1749460107.463:1635): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8620 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1283.684561] loop0: detected capacity change from 0 to 2048 09:08:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001d004527004000000000000006"], 0x14}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x630]}}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="08092cbdc01670d9df4bf228a553bd", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2004c0c0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) write$binfmt_elf64(r6, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRESDEC], 0xfdef) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000002ec0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff}, 0x1c) r8 = dup(0xffffffffffffffff) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x30, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x40010) read(r0, &(0x7f0000000100)=""/153, 0x99) 09:08:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x10}) 09:08:27 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0, 0x300000000000000}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:08:27 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 28) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1283.696146] audit: type=1326 audit(1749460107.463:1636): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8620 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1283.699429] audit: type=1326 audit(1749460107.477:1637): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8620 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1283.703019] audit: type=1326 audit(1749460107.479:1638): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8620 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1283.706013] audit: type=1326 audit(1749460107.482:1639): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8620 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1283.709314] audit: type=1326 audit(1749460107.482:1640): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8620 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1283.715953] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1283.721182] audit: type=1326 audit(1749460107.483:1641): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8620 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1283.727838] audit: type=1326 audit(1749460107.483:1642): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8620 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:08:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00030000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1283.731125] audit: type=1326 audit(1749460107.483:1643): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8620 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1283.734545] audit: type=1326 audit(1749460107.484:1644): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8620 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:08:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@stripe={'stripe', 0x3d, 0x9}}, {@min_batch_time}]}) [ 1283.775441] FAULT_INJECTION: forcing a failure. [ 1283.775441] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.778141] CPU: 0 PID: 8636 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1283.779613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1283.781388] Call Trace: [ 1283.781953] dump_stack+0x107/0x167 [ 1283.782755] should_fail.cold+0x5/0xa [ 1283.783563] ? relay_open_buf.part.0+0xf9/0xc00 [ 1283.784553] should_failslab+0x5/0x20 [ 1283.785360] __kmalloc+0x72/0x390 [ 1283.786095] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1283.787188] relay_open_buf.part.0+0xf9/0xc00 [ 1283.788134] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1283.789242] relay_open+0x531/0xa10 [ 1283.790010] do_blk_trace_setup+0x4cf/0xc10 [ 1283.790938] ? _copy_from_user+0xfb/0x1b0 [ 1283.791807] __blk_trace_setup+0xca/0x180 [ 1283.792670] ? do_blk_trace_setup+0xc10/0xc10 [ 1283.793630] blk_trace_ioctl+0x155/0x290 [ 1283.794491] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1283.795512] ? do_vfs_ioctl+0x283/0x10d0 [ 1283.796360] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1283.797451] ? generic_block_fiemap+0x60/0x60 [ 1283.798398] ? lock_downgrade+0x6d0/0x6d0 [ 1283.799268] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1283.800279] blkdev_ioctl+0xc1/0x710 [ 1283.801059] ? blkdev_common_ioctl+0x1930/0x1930 [ 1283.802051] ? selinux_file_ioctl+0xb6/0x270 [ 1283.802979] block_ioctl+0xf9/0x140 [ 1283.803729] ? blkdev_read_iter+0x1c0/0x1c0 [ 1283.804621] __x64_sys_ioctl+0x19a/0x210 [ 1283.805467] do_syscall_64+0x33/0x40 [ 1283.806245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1283.807303] RIP: 0033:0x7f805ff83b19 [ 1283.808076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1283.811890] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1283.813475] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1283.814965] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1283.816443] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1283.817932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1283.819466] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 09:08:27 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1283.835820] loop0: detected capacity change from 0 to 2048 [ 1283.841169] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1283.843464] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:08:27 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 29) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1283.890784] EXT4-fs (loop0): Can't read superblock on 2nd try 09:08:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:08:27 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0, 0x6112000000000000}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:08:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x300}) 09:08:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00090000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:08:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:08:27 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1284.021220] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1284.022284] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1284.052588] loop0: detected capacity change from 0 to 2048 [ 1284.060149] FAULT_INJECTION: forcing a failure. [ 1284.060149] name failslab, interval 1, probability 0, space 0, times 0 09:08:27 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0, 0xa40f000000000000}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1284.063002] CPU: 0 PID: 8662 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1284.064701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1284.066600] Call Trace: [ 1284.067216] dump_stack+0x107/0x167 [ 1284.068051] should_fail.cold+0x5/0xa [ 1284.068946] ? create_object.isra.0+0x3a/0xa20 [ 1284.069963] should_failslab+0x5/0x20 [ 1284.070866] kmem_cache_alloc+0x5b/0x310 [ 1284.071770] ? mark_held_locks+0x9e/0xe0 [ 1284.072675] create_object.isra.0+0x3a/0xa20 [ 1284.073647] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1284.074784] __kmalloc+0x16e/0x390 [ 1284.075580] relay_open_buf.part.0+0xf9/0xc00 [ 1284.076581] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1284.077730] relay_open+0x531/0xa10 [ 1284.078556] do_blk_trace_setup+0x4cf/0xc10 [ 1284.079514] ? _copy_from_user+0xfb/0x1b0 [ 1284.080436] __blk_trace_setup+0xca/0x180 [ 1284.081356] ? do_blk_trace_setup+0xc10/0xc10 [ 1284.082387] blk_trace_ioctl+0x155/0x290 [ 1284.083292] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1284.084377] ? do_vfs_ioctl+0x283/0x10d0 [ 1284.085277] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1284.086449] ? generic_block_fiemap+0x60/0x60 [ 1284.087441] ? lock_downgrade+0x6d0/0x6d0 [ 1284.088359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1284.089433] blkdev_ioctl+0xc1/0x710 [ 1284.090270] ? blkdev_common_ioctl+0x1930/0x1930 [ 1284.091323] ? selinux_file_ioctl+0xb6/0x270 [ 1284.092302] block_ioctl+0xf9/0x140 [ 1284.093106] ? blkdev_read_iter+0x1c0/0x1c0 [ 1284.094063] __x64_sys_ioctl+0x19a/0x210 [ 1284.094974] do_syscall_64+0x33/0x40 [ 1284.095804] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1284.096939] RIP: 0033:0x7f805ff83b19 [ 1284.097765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1284.101857] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.103557] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1284.105145] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1284.106746] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1284.108334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1284.109918] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1284.122122] EXT4-fs (loop0): Can't read superblock on 2nd try 09:08:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x900}) 09:08:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000d0000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:08:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1284.170424] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1284.171507] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:08:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000e0000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1284.273130] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1284.275597] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:08:39 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0, 0xffffffff00000000}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:08:39 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:08:39 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 30) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:08:39 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:08:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xa00}) 09:08:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:08:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 1) 09:08:39 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000140)) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-%:\x0e', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cb000000000000f6bb696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40086607, &(0x7f0000000080)) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000180)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(?\f\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf250100000008000200040000000c00018008000300ac141420"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x60805) splice(r1, 0x0, r0, 0x0, 0xde, 0x0) [ 1296.145962] kauditd_printk_skb: 21 callbacks suppressed [ 1296.145976] audit: type=1326 audit(1749460119.935:1666): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8692 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1296.150595] audit: type=1326 audit(1749460119.937:1667): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8692 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1296.157402] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1296.157854] FAULT_INJECTION: forcing a failure. [ 1296.157854] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.159862] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1296.161439] CPU: 1 PID: 8708 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1296.161456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1296.166538] Call Trace: [ 1296.166966] dump_stack+0x107/0x167 [ 1296.167548] should_fail.cold+0x5/0xa [ 1296.168151] ? __do_sys_memfd_create+0xfb/0x450 [ 1296.168886] should_failslab+0x5/0x20 [ 1296.169457] __kmalloc+0x72/0x390 [ 1296.169941] __do_sys_memfd_create+0xfb/0x450 [ 1296.170696] ? ksys_write+0x1a9/0x260 [ 1296.171171] ? memfd_file_seals_ptr+0x170/0x170 [ 1296.171740] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1296.172521] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1296.173312] do_syscall_64+0x33/0x40 [ 1296.173794] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1296.174456] RIP: 0033:0x7ffb8254eb19 [ 1296.175093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1296.177832] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1296.179036] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1296.180215] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1296.181346] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1296.182518] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1296.183611] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 [ 1296.186232] audit: type=1326 audit(1749460119.961:1668): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8692 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1296.198527] audit: type=1326 audit(1749460119.988:1669): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8692 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:08:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 2) [ 1296.218607] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1296.220749] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1296.230360] FAULT_INJECTION: forcing a failure. [ 1296.230360] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.232932] CPU: 0 PID: 8704 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1296.234423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1296.236174] Call Trace: [ 1296.236729] dump_stack+0x107/0x167 [ 1296.237517] should_fail.cold+0x5/0xa [ 1296.238354] ? relay_open_buf.part.0+0x472/0xc00 [ 1296.239353] should_failslab+0x5/0x20 [ 1296.240154] __kmalloc+0x72/0x390 [ 1296.240895] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1296.241975] relay_open_buf.part.0+0x472/0xc00 [ 1296.242949] relay_open+0x531/0xa10 [ 1296.243734] do_blk_trace_setup+0x4cf/0xc10 [ 1296.244650] ? _copy_from_user+0xfb/0x1b0 [ 1296.245526] __blk_trace_setup+0xca/0x180 [ 1296.246409] ? do_blk_trace_setup+0xc10/0xc10 [ 1296.247378] blk_trace_ioctl+0x155/0x290 [ 1296.248232] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1296.249275] ? do_vfs_ioctl+0x283/0x10d0 [ 1296.250134] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1296.251284] ? generic_block_fiemap+0x60/0x60 [ 1296.252236] ? lock_downgrade+0x6d0/0x6d0 [ 1296.252742] audit: type=1326 audit(1749460120.039:1670): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8692 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1296.253125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1296.253153] blkdev_ioctl+0xc1/0x710 [ 1296.256353] audit: type=1326 audit(1749460120.044:1671): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8692 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1296.256847] ? blkdev_common_ioctl+0x1930/0x1930 [ 1296.258788] audit: type=1326 audit(1749460120.044:1672): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8692 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1296.261766] ? selinux_file_ioctl+0xb6/0x270 [ 1296.261791] block_ioctl+0xf9/0x140 [ 1296.261812] ? blkdev_read_iter+0x1c0/0x1c0 [ 1296.265770] audit: type=1326 audit(1749460120.053:1673): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8692 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1296.266905] __x64_sys_ioctl+0x19a/0x210 [ 1296.266928] do_syscall_64+0x33/0x40 [ 1296.266950] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1296.269736] audit: type=1326 audit(1749460120.053:1674): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8692 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1296.273560] RIP: 0033:0x7f805ff83b19 [ 1296.273580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1296.273590] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1296.273609] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1296.273620] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1296.273630] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1296.273640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1296.273651] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 09:08:40 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0xfa4}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:08:40 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000900000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1296.297756] audit: type=1326 audit(1749460120.053:1675): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8692 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1296.313247] FAULT_INJECTION: forcing a failure. [ 1296.313247] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.314570] CPU: 1 PID: 8716 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1296.315366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1296.316605] Call Trace: [ 1296.317032] dump_stack+0x107/0x167 [ 1296.317575] should_fail.cold+0x5/0xa [ 1296.318143] ? create_object.isra.0+0x3a/0xa20 [ 1296.318837] should_failslab+0x5/0x20 [ 1296.319403] kmem_cache_alloc+0x5b/0x310 [ 1296.320010] create_object.isra.0+0x3a/0xa20 [ 1296.320665] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1296.321423] __kmalloc+0x16e/0x390 [ 1296.321964] __do_sys_memfd_create+0xfb/0x450 [ 1296.322639] ? ksys_write+0x1a9/0x260 [ 1296.323195] ? memfd_file_seals_ptr+0x170/0x170 [ 1296.323895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1296.324681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1296.325453] do_syscall_64+0x33/0x40 [ 1296.326007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1296.326767] RIP: 0033:0x7ffb8254eb19 [ 1296.327314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1296.330025] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1296.331149] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1296.332206] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1296.333255] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1296.334312] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1296.335364] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 [ 1296.365238] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1296.367432] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:08:40 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:08:40 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 31) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:08:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000500)=ANY=[@ANYBLOB="feff00822db87c3d1ea8d9599eafdb49b36a6d0886e7b1fc965be1a65967e183b5a18278e6d9821c9f", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530002c87af821976942a5ffe872c5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cfba9e02ef30e546553ce5"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[r2, 0xffffffffffffffff], 0x2) lseek(0xffffffffffffffff, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r4 = openat$hpet(0xffffffffffffff9c, 0x0, 0x12282, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="00080000170001a9cb00000000000000fe8800000000000000000000ce4171da00b8254f618835e2598e250700010000000000000300000000000000000000000000000000000000f9ae05c700000000000000000000fc00"/118, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="070000000000000000000000000000027f0000010000000000005f9100000002000000000000180a000000000060a4e58e4bfb5afdc9", @ANYRES32=0x0, @ANYRES32=r1, @ANYRESHEX], 0x134}}, 0x24008811) close(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0xb31505c58d61db6b}, 0x44001) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000100)={0x6200, 0x1f, 0x1}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) copy_file_range(r4, &(0x7f0000000200)=0x80000000, r4, &(0x7f0000000240)=0x100000001, 0x3, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r3, 0x0, 0x200f5ef, 0x0) syz_io_uring_setup(0x8f3, &(0x7f0000000340)={0x0, 0xb2a6, 0x1, 0x1, 0x9f, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000480)) [ 1296.443420] loop0: detected capacity change from 0 to 2048 [ 1296.452065] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1296.471287] FAULT_INJECTION: forcing a failure. [ 1296.471287] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.473104] CPU: 1 PID: 8731 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1296.473945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1296.475123] Call Trace: [ 1296.475510] dump_stack+0x107/0x167 [ 1296.475925] should_fail.cold+0x5/0xa [ 1296.476356] ? create_object.isra.0+0x3a/0xa20 [ 1296.477023] should_failslab+0x5/0x20 [ 1296.477456] kmem_cache_alloc+0x5b/0x310 [ 1296.478020] ? mark_held_locks+0x9e/0xe0 [ 1296.478513] create_object.isra.0+0x3a/0xa20 [ 1296.479120] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1296.479690] __kmalloc+0x16e/0x390 [ 1296.480191] relay_open_buf.part.0+0x472/0xc00 [ 1296.480716] relay_open+0x531/0xa10 [ 1296.481256] do_blk_trace_setup+0x4cf/0xc10 [ 1296.481858] ? _copy_from_user+0xfb/0x1b0 [ 1296.482374] __blk_trace_setup+0xca/0x180 [ 1296.482952] ? do_blk_trace_setup+0xc10/0xc10 [ 1296.483489] blk_trace_ioctl+0x155/0x290 [ 1296.484036] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1296.484616] ? do_vfs_ioctl+0x283/0x10d0 [ 1296.485177] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1296.485769] ? generic_block_fiemap+0x60/0x60 [ 1296.486283] ? lock_downgrade+0x6d0/0x6d0 [ 1296.486755] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1296.487301] blkdev_ioctl+0xc1/0x710 [ 1296.487809] ? blkdev_common_ioctl+0x1930/0x1930 [ 1296.488340] ? selinux_file_ioctl+0xb6/0x270 [ 1296.488961] block_ioctl+0xf9/0x140 [ 1296.489373] ? blkdev_read_iter+0x1c0/0x1c0 [ 1296.489981] __x64_sys_ioctl+0x19a/0x210 [ 1296.490546] do_syscall_64+0x33/0x40 [ 1296.491045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1296.491661] RIP: 0033:0x7f805ff83b19 [ 1296.492093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1296.494138] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1296.494993] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1296.495789] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1296.496580] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1296.497365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1296.498156] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1308.676771] FAULT_INJECTION: forcing a failure. [ 1308.676771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.679661] CPU: 0 PID: 8742 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1308.681170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1308.682877] Call Trace: [ 1308.683429] dump_stack+0x107/0x167 [ 1308.684187] should_fail.cold+0x5/0xa [ 1308.684983] _copy_from_user+0x2e/0x1b0 [ 1308.685813] __do_sys_memfd_create+0x16d/0x450 [ 1308.686759] ? memfd_file_seals_ptr+0x170/0x170 [ 1308.687723] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1308.688812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1308.689875] do_syscall_64+0x33/0x40 [ 1308.690655] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1308.691704] RIP: 0033:0x7ffb8254eb19 [ 1308.692468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1308.696236] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1308.697795] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1308.699261] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1308.700714] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1308.702417] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1308.703881] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 09:08:52 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 32) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:08:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xd00}) 09:08:52 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:08:52 executing program 3: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0xfa4}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:08:52 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1002}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:08:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:08:52 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000d00000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:08:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 3) [ 1308.712141] kauditd_printk_skb: 21 callbacks suppressed [ 1308.712156] audit: type=1326 audit(1749460132.502:1697): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1308.724341] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1308.726308] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1308.739914] audit: type=1326 audit(1749460132.504:1698): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:08:52 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:08:52 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x2, 0x3, 0x800, 0x8}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) syz_open_dev$vcsa(&(0x7f0000000000), 0x20, 0x480000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x0, 0x53f, 0x10000000, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001140)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @multicast1, @local}}}], 0x20}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x1, 0x9, 0xa, @mcast2, @mcast1, 0x80, 0x10, 0x6, 0x800}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@empty, @dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x309, 0xfffa, 0x400, 0x3, 0x800100, r2}) fsetxattr$security_selinux(r1, &(0x7f0000000080), &(0x7f0000000140)='system_u:object_r:crypt_device_t:s0\x00', 0x24, 0x3) fallocate(r1, 0x3, 0x5d0, 0x8000) [ 1308.772230] audit: type=1326 audit(1749460132.504:1699): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1308.776717] audit: type=1326 audit(1749460132.505:1700): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1308.804802] FAULT_INJECTION: forcing a failure. [ 1308.804802] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1308.807809] CPU: 0 PID: 8757 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1308.809424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1308.811407] Call Trace: [ 1308.812038] dump_stack+0x107/0x167 [ 1308.812900] should_fail.cold+0x5/0xa [ 1308.813519] audit: type=1326 audit(1749460132.506:1701): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1308.813809] __alloc_pages_nodemask+0x182/0x600 [ 1308.817959] ? __kmalloc+0x16e/0x390 [ 1308.818858] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1308.820277] ? trace_hardirqs_on+0x5b/0x180 [ 1308.821312] alloc_pages_current+0x187/0x280 [ 1308.822375] relay_open_buf.part.0+0x2a5/0xc00 [ 1308.823461] relay_open+0x531/0xa10 [ 1308.824326] do_blk_trace_setup+0x4cf/0xc10 [ 1308.825349] ? _copy_from_user+0xfb/0x1b0 [ 1308.826333] __blk_trace_setup+0xca/0x180 [ 1308.827323] ? do_blk_trace_setup+0xc10/0xc10 [ 1308.828215] blk_trace_ioctl+0x155/0x290 [ 1308.828395] audit: type=1326 audit(1749460132.507:1702): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1308.829166] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1308.829189] ? do_vfs_ioctl+0x283/0x10d0 [ 1308.834092] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1308.835337] ? generic_block_fiemap+0x60/0x60 [ 1308.836394] ? lock_downgrade+0x6d0/0x6d0 [ 1308.837359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1308.838515] blkdev_ioctl+0xc1/0x710 [ 1308.839392] ? blkdev_common_ioctl+0x1930/0x1930 [ 1308.840518] ? selinux_file_ioctl+0xb6/0x270 [ 1308.841555] block_ioctl+0xf9/0x140 [ 1308.842420] ? blkdev_read_iter+0x1c0/0x1c0 [ 1308.843263] __x64_sys_ioctl+0x19a/0x210 [ 1308.843563] audit: type=1326 audit(1749460132.507:1703): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1308.844214] do_syscall_64+0x33/0x40 [ 1308.844236] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1308.849303] RIP: 0033:0x7f805ff83b19 [ 1308.850156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1308.853719] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1308.853744] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1308.856227] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1308.857612] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1308.858997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1308.860369] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1308.860566] audit: type=1326 audit(1749460132.507:1704): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1308.877301] audit: type=1326 audit(1749460132.508:1705): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1308.902051] audit: type=1326 audit(1749460132.508:1706): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1330.540039] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1330.542111] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:09:14 executing program 3: r0 = syz_io_uring_setup(0x68d2, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40086607, &(0x7f0000000080)) syz_io_uring_setup(0x1008, &(0x7f0000000740)={0x0, 0xfffffffd, 0x0, 0x4, 0x7d, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) 09:09:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000e00000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:09:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:09:14 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:09:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xe00}) 09:09:14 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 33) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:09:14 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1003}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:09:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 4) 09:09:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1330.641345] kauditd_printk_skb: 19 callbacks suppressed [ 1330.641368] audit: type=1326 audit(1749460154.432:1726): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8779 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1330.649155] FAULT_INJECTION: forcing a failure. [ 1330.649155] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1330.650908] audit: type=1326 audit(1749460154.441:1727): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8779 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1330.651891] CPU: 0 PID: 8785 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1330.657660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1330.659453] Call Trace: [ 1330.660025] dump_stack+0x107/0x167 [ 1330.660812] should_fail.cold+0x5/0xa [ 1330.661640] __alloc_pages_nodemask+0x182/0x600 [ 1330.662649] ? __kmalloc+0x16e/0x390 [ 1330.663453] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1330.664758] ? trace_hardirqs_on+0x5b/0x180 [ 1330.665693] alloc_pages_current+0x187/0x280 [ 1330.666654] relay_open_buf.part.0+0x2a5/0xc00 [ 1330.667648] relay_open+0x531/0xa10 [ 1330.668452] do_blk_trace_setup+0x4cf/0xc10 [ 1330.669386] ? _copy_from_user+0xfb/0x1b0 [ 1330.670277] __blk_trace_setup+0xca/0x180 [ 1330.671171] ? do_blk_trace_setup+0xc10/0xc10 [ 1330.672162] blk_trace_ioctl+0x155/0x290 [ 1330.673042] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1330.674099] ? do_vfs_ioctl+0x283/0x10d0 [ 1330.674792] audit: type=1326 audit(1749460154.441:1728): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8779 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1330.674974] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1330.674993] ? generic_block_fiemap+0x60/0x60 [ 1330.675019] ? lock_downgrade+0x6d0/0x6d0 [ 1330.682433] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1330.683481] blkdev_ioctl+0xc1/0x710 [ 1330.684280] ? blkdev_common_ioctl+0x1930/0x1930 [ 1330.685295] ? selinux_file_ioctl+0xb6/0x270 [ 1330.686234] block_ioctl+0xf9/0x140 [ 1330.687022] ? blkdev_read_iter+0x1c0/0x1c0 [ 1330.687949] __x64_sys_ioctl+0x19a/0x210 [ 1330.687971] do_syscall_64+0x33/0x40 [ 1330.687989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1330.688003] RIP: 0033:0x7f805ff83b19 [ 1330.688022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:09:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xf00}) 09:09:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 5) [ 1330.688032] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1330.688052] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1330.688063] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1330.688072] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1330.688082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1330.688092] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1330.697167] FAULT_INJECTION: forcing a failure. [ 1330.697167] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.697188] CPU: 0 PID: 8793 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1330.697197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1330.697201] Call Trace: [ 1330.697222] dump_stack+0x107/0x167 [ 1330.697242] should_fail.cold+0x5/0xa [ 1330.697262] ? shmem_alloc_inode+0x18/0x40 [ 1330.697282] should_failslab+0x5/0x20 [ 1330.697300] kmem_cache_alloc+0x5b/0x310 09:09:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000020000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:09:14 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1330.697321] ? shmem_destroy_inode+0x70/0x70 [ 1330.697339] shmem_alloc_inode+0x18/0x40 [ 1330.697356] ? shmem_destroy_inode+0x70/0x70 09:09:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1330.697370] alloc_inode+0x63/0x240 [ 1330.697386] new_inode+0x23/0x250 [ 1330.697408] shmem_get_inode+0x15e/0xbc0 [ 1330.697434] __shmem_file_setup+0xb8/0x320 [ 1330.697452] ? _copy_from_user+0xfb/0x1b0 [ 1330.697473] __do_sys_memfd_create+0x275/0x450 [ 1330.697493] ? memfd_file_seals_ptr+0x170/0x170 [ 1330.697515] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1330.697533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1330.697553] do_syscall_64+0x33/0x40 [ 1330.697571] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1330.697582] RIP: 0033:0x7ffb8254eb19 [ 1330.697597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:09:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x2000}) 09:09:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 6) [ 1330.697607] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1330.697625] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1330.697635] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1330.697645] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1330.697655] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1330.697664] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 [ 1330.722503] audit: type=1326 audit(1749460154.452:1729): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8779 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1330.722602] audit: type=1326 audit(1749460154.452:1730): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8779 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1330.722693] audit: type=1326 audit(1749460154.460:1731): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8779 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1330.722780] audit: type=1326 audit(1749460154.460:1732): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8779 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1330.722859] audit: type=1326 audit(1749460154.460:1733): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8779 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1330.723031] audit: type=1326 audit(1749460154.474:1734): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8779 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1330.723120] audit: type=1326 audit(1749460154.474:1735): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8779 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1330.737086] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1330.737141] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1330.821474] FAULT_INJECTION: forcing a failure. [ 1330.821474] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.821495] CPU: 1 PID: 8800 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1330.821506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1330.821511] Call Trace: [ 1330.821534] dump_stack+0x107/0x167 [ 1330.821554] should_fail.cold+0x5/0xa [ 1330.821574] ? create_object.isra.0+0x3a/0xa20 [ 1330.821594] should_failslab+0x5/0x20 [ 1330.821612] kmem_cache_alloc+0x5b/0x310 [ 1330.821635] create_object.isra.0+0x3a/0xa20 [ 1330.821650] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1330.821672] kmem_cache_alloc+0x159/0x310 [ 1330.821694] ? shmem_destroy_inode+0x70/0x70 [ 1330.821713] shmem_alloc_inode+0x18/0x40 [ 1330.821730] ? shmem_destroy_inode+0x70/0x70 [ 1330.821744] alloc_inode+0x63/0x240 [ 1330.821760] new_inode+0x23/0x250 [ 1330.821782] shmem_get_inode+0x15e/0xbc0 [ 1330.821809] __shmem_file_setup+0xb8/0x320 [ 1330.821828] ? _copy_from_user+0xfb/0x1b0 [ 1330.821848] __do_sys_memfd_create+0x275/0x450 [ 1330.821867] ? memfd_file_seals_ptr+0x170/0x170 [ 1330.821898] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1330.821918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1330.821939] do_syscall_64+0x33/0x40 [ 1330.821957] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1330.821969] RIP: 0033:0x7ffb8254eb19 [ 1330.821985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1330.821995] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1330.822014] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1330.822024] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1330.822034] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1330.822044] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1330.822054] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 [ 1330.834554] loop0: detected capacity change from 0 to 2048 [ 1330.865269] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1330.905549] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1330.905600] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1331.075606] FAULT_INJECTION: forcing a failure. [ 1331.075606] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.075629] CPU: 0 PID: 8817 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1331.075640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.075646] Call Trace: [ 1331.075674] dump_stack+0x107/0x167 [ 1331.075698] should_fail.cold+0x5/0xa [ 1331.075719] ? security_inode_alloc+0x34/0x160 [ 1331.075744] should_failslab+0x5/0x20 [ 1331.075765] kmem_cache_alloc+0x5b/0x310 [ 1331.075790] security_inode_alloc+0x34/0x160 [ 1331.075812] inode_init_always+0xa4e/0xd10 [ 1331.075833] ? shmem_destroy_inode+0x70/0x70 [ 1331.075854] alloc_inode+0x84/0x240 [ 1331.075873] new_inode+0x23/0x250 [ 1331.075909] shmem_get_inode+0x15e/0xbc0 [ 1331.075940] __shmem_file_setup+0xb8/0x320 [ 1331.075961] ? _copy_from_user+0xfb/0x1b0 [ 1331.075986] __do_sys_memfd_create+0x275/0x450 [ 1331.076008] ? memfd_file_seals_ptr+0x170/0x170 [ 1331.076036] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1331.076059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1331.076082] do_syscall_64+0x33/0x40 [ 1331.076104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1331.076117] RIP: 0033:0x7ffb8254eb19 [ 1331.076136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.076147] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1331.076170] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1331.076182] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1331.076194] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1331.076206] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1331.076218] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 09:09:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x2830}) 09:09:27 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:09:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000030000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:09:27 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 34) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1343.985327] FAULT_INJECTION: forcing a failure. [ 1343.985327] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.986817] CPU: 1 PID: 8827 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1343.987664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1343.988698] Call Trace: [ 1343.989024] dump_stack+0x107/0x167 [ 1343.989474] should_fail.cold+0x5/0xa [ 1343.989940] ? create_object.isra.0+0x3a/0xa20 [ 1343.990510] should_failslab+0x5/0x20 [ 1343.990993] kmem_cache_alloc+0x5b/0x310 [ 1343.991504] create_object.isra.0+0x3a/0xa20 [ 1343.992050] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1343.992680] kmem_cache_alloc+0x159/0x310 [ 1343.993245] security_inode_alloc+0x34/0x160 [ 1343.993797] inode_init_always+0xa4e/0xd10 [ 1343.994335] ? shmem_destroy_inode+0x70/0x70 [ 1343.994886] alloc_inode+0x84/0x240 [ 1343.995334] new_inode+0x23/0x250 [ 1343.995778] shmem_get_inode+0x15e/0xbc0 [ 1343.996286] __shmem_file_setup+0xb8/0x320 [ 1343.996806] ? _copy_from_user+0xfb/0x1b0 [ 1343.997316] __do_sys_memfd_create+0x275/0x450 [ 1343.997891] ? memfd_file_seals_ptr+0x170/0x170 [ 1343.998467] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1343.999131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1343.999761] do_syscall_64+0x33/0x40 [ 1344.000240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1344.000867] RIP: 0033:0x7ffb8254eb19 [ 1344.001326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.003575] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1344.004502] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1344.005372] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1344.006234] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1344.007113] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1344.007985] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 09:09:27 executing program 3: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x138}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1/file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) ftruncate(0xffffffffffffffff, 0x1000003) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2000000}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) io_uring_enter(r3, 0x45ca, 0xf331, 0x0, &(0x7f0000000280)={[0x7]}, 0x8) pselect6(0x40, &(0x7f00000013c0)={0x0, 0xfffffffffffffeff, 0x0, 0x9d, 0x5, 0x0, 0x8}, 0x0, &(0x7f0000001440)={0xe5, 0x80000000a, 0x0, 0x2000000000000005, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) quotactl(0x0, &(0x7f0000001340)='./file0\x00', 0x0, &(0x7f0000000180)="637b5d08aede0e6ded4f1e4ea75480cf7f06d1e53798a2acdb3a4a8f435a290000c65a7edea4f0d894") ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000200)={0x1, 0x0, {0xa, 0x19, 0x12, 0xd, 0x9, 0xb54, 0x3, 0x142, 0xffffffffffffffff}}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000400)=ANY=[@ANYBLOB="50010000100001000000000000000000ac141441000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x150}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYRES16=r0], 0x194}, 0x1, 0x0, 0x0, 0x24044804}, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) unshare(0x48020200) 09:09:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:09:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 7) 09:09:27 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x5000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1344.016434] loop0: detected capacity change from 0 to 2048 [ 1344.043638] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1344.044874] FAULT_INJECTION: forcing a failure. [ 1344.044874] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.045848] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1344.048826] CPU: 1 PID: 8828 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1344.049655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.050660] Call Trace: [ 1344.050996] dump_stack+0x107/0x167 [ 1344.051445] should_fail.cold+0x5/0xa [ 1344.051905] ? create_object.isra.0+0x3a/0xa20 [ 1344.052459] should_failslab+0x5/0x20 [ 1344.052927] kmem_cache_alloc+0x5b/0x310 [ 1344.053421] create_object.isra.0+0x3a/0xa20 [ 1344.053945] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1344.054565] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1344.055190] __get_vm_area_node+0xd4/0x340 [ 1344.055703] ? relay_open_buf.part.0+0x4cf/0xc00 [ 1344.056277] get_vm_area_caller+0x70/0xb0 [ 1344.056774] ? relay_open_buf.part.0+0x4cf/0xc00 [ 1344.057344] vmap+0xe9/0x2c0 [ 1344.057722] ? vunmap+0x70/0x70 [ 1344.058129] relay_open_buf.part.0+0x4cf/0xc00 [ 1344.058706] relay_open+0x531/0xa10 [ 1344.059154] do_blk_trace_setup+0x4cf/0xc10 [ 1344.059677] ? _copy_from_user+0xfb/0x1b0 [ 1344.060176] __blk_trace_setup+0xca/0x180 [ 1344.060680] ? do_blk_trace_setup+0xc10/0xc10 [ 1344.061233] blk_trace_ioctl+0x155/0x290 [ 1344.061721] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1344.062311] ? do_vfs_ioctl+0x283/0x10d0 [ 1344.062803] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1344.063427] ? generic_block_fiemap+0x60/0x60 [ 1344.063961] ? lock_downgrade+0x6d0/0x6d0 [ 1344.064463] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1344.065042] blkdev_ioctl+0xc1/0x710 [ 1344.065499] ? blkdev_common_ioctl+0x1930/0x1930 [ 1344.066065] ? selinux_file_ioctl+0xb6/0x270 [ 1344.066604] block_ioctl+0xf9/0x140 [ 1344.067048] ? blkdev_read_iter+0x1c0/0x1c0 [ 1344.067571] __x64_sys_ioctl+0x19a/0x210 [ 1344.068066] do_syscall_64+0x33/0x40 [ 1344.068512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1344.069132] RIP: 0033:0x7f805ff83b19 [ 1344.069577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.071800] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1344.072708] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1344.073580] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1344.074447] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.075305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.076162] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1344.079771] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1344.081031] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1344.118679] kauditd_printk_skb: 16 callbacks suppressed [ 1344.118691] audit: type=1326 audit(1749460167.905:1752): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8829 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1344.123972] audit: type=1326 audit(1749460167.906:1753): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8829 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:09:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000090000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1344.136190] audit: type=1326 audit(1749460167.913:1754): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8829 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1344.145556] audit: type=1326 audit(1749460167.913:1755): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8829 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:09:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x2838}) [ 1344.155792] audit: type=1326 audit(1749460167.913:1756): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8829 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1344.166459] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1344.167604] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1344.169991] audit: type=1326 audit(1749460167.918:1757): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8829 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1344.186680] audit: type=1326 audit(1749460167.918:1758): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8829 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1344.190466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1344.198421] audit: type=1326 audit(1749460167.918:1759): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8829 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1344.214164] audit: type=1326 audit(1749460167.918:1760): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8829 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1344.222611] audit: type=1326 audit(1749460167.921:1761): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8829 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:09:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 8) 09:09:27 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:09:27 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 35) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:09:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r1, &(0x7f0000000040), 0x12) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) gettid() syncfs(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000d6d05c905202f18cd6456df8d1265e", @ANYRES16=0x0, @ANYBLOB="050000000000000000000200000008000300427e0764b9f5b499f325d62a3e5591aeb2a89a7545c3722120689c2a0f76cc7bd1225ff7ad1d75416b63a9c0c3406557d9f9ff16ca77bfedff7b17b6e0685bc1c6fe52270daf5c005e627ffccd43b9320b556f1f68c67008a8991261a6e1a9b1ccde41", @ANYRES32=r3, @ANYBLOB="080026006c09000008009f0007000000"], 0x2c}}, 0x0) sendfile(r2, r1, &(0x7f0000000100)=0x200, 0x1000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) syncfs(r4) 09:09:28 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x20003180}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:09:28 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x7ffff000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:09:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x2840}) [ 1344.302496] syz-executor.3 (8860): /proc/8860/oom_adj is deprecated, please use /proc/8860/oom_score_adj instead. 09:09:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000d0000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:09:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) [ 1344.383714] FAULT_INJECTION: forcing a failure. [ 1344.383714] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.386280] CPU: 0 PID: 8869 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1344.387825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.389691] Call Trace: [ 1344.390294] dump_stack+0x107/0x167 [ 1344.391133] should_fail.cold+0x5/0xa [ 1344.391994] ? __d_alloc+0x2a/0x990 [ 1344.392821] should_failslab+0x5/0x20 [ 1344.393678] kmem_cache_alloc+0x5b/0x310 [ 1344.394592] ? trace_hardirqs_on+0x5b/0x180 [ 1344.395580] __d_alloc+0x2a/0x990 [ 1344.396371] d_alloc_pseudo+0x19/0x70 [ 1344.397226] alloc_file_pseudo+0xce/0x250 [ 1344.398154] ? alloc_file+0x5a0/0x5a0 [ 1344.399024] ? shmem_get_inode+0x55c/0xbc0 [ 1344.399993] __shmem_file_setup+0x144/0x320 [ 1344.400967] ? _copy_from_user+0xfb/0x1b0 [ 1344.401908] __do_sys_memfd_create+0x275/0x450 [ 1344.402933] ? memfd_file_seals_ptr+0x170/0x170 [ 1344.403986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1344.405152] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1344.406319] do_syscall_64+0x33/0x40 [ 1344.407173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1344.408325] RIP: 0033:0x7ffb8254eb19 [ 1344.409162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.413262] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1344.414985] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1344.416603] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1344.418220] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1344.419868] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1344.421538] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 [ 1344.445150] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1344.446280] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:09:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000e0000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1344.488912] FAULT_INJECTION: forcing a failure. [ 1344.488912] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.492127] CPU: 0 PID: 8867 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1344.493618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.495492] Call Trace: [ 1344.496096] dump_stack+0x107/0x167 [ 1344.496881] should_fail.cold+0x5/0xa [ 1344.497733] ? alloc_vmap_area+0x148/0x1d10 [ 1344.498708] should_failslab+0x5/0x20 [ 1344.499576] kmem_cache_alloc_node+0x55/0x330 [ 1344.500609] alloc_vmap_area+0x148/0x1d10 [ 1344.501551] ? kmem_cache_alloc_node_trace+0x16d/0x340 [ 1344.502754] ? mark_held_locks+0x9e/0xe0 [ 1344.503692] ? purge_vmap_area_lazy+0xc0/0xc0 [ 1344.504713] ? kasan_unpoison_shadow+0x33/0x50 [ 1344.505745] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1344.506942] __get_vm_area_node+0x127/0x340 [ 1344.507953] ? relay_open_buf.part.0+0x4cf/0xc00 [ 1344.509056] get_vm_area_caller+0x70/0xb0 [ 1344.510025] ? relay_open_buf.part.0+0x4cf/0xc00 [ 1344.511155] vmap+0xe9/0x2c0 [ 1344.511877] ? vunmap+0x70/0x70 [ 1344.512660] relay_open_buf.part.0+0x4cf/0xc00 [ 1344.513742] relay_open+0x531/0xa10 [ 1344.514609] do_blk_trace_setup+0x4cf/0xc10 [ 1344.515649] ? _copy_from_user+0xfb/0x1b0 [ 1344.516634] __blk_trace_setup+0xca/0x180 [ 1344.517605] ? do_blk_trace_setup+0xc10/0xc10 [ 1344.518708] blk_trace_ioctl+0x155/0x290 [ 1344.519678] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1344.520854] ? do_vfs_ioctl+0x283/0x10d0 [ 1344.521813] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1344.523097] ? generic_block_fiemap+0x60/0x60 [ 1344.524165] ? lock_downgrade+0x6d0/0x6d0 [ 1344.525163] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1344.526307] blkdev_ioctl+0xc1/0x710 [ 1344.527194] ? blkdev_common_ioctl+0x1930/0x1930 [ 1344.528303] ? selinux_file_ioctl+0xb6/0x270 [ 1344.529346] block_ioctl+0xf9/0x140 [ 1344.530194] ? blkdev_read_iter+0x1c0/0x1c0 [ 1344.531218] __x64_sys_ioctl+0x19a/0x210 [ 1344.532173] do_syscall_64+0x33/0x40 [ 1344.533048] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1344.534278] RIP: 0033:0x7f805ff83b19 [ 1344.535181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.539522] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1344.541326] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1344.543026] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1344.544712] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.546395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.548086] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 09:09:28 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:09:28 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x2}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:09:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 9) [ 1344.581304] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1344.583538] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:09:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1344.619899] FAULT_INJECTION: forcing a failure. [ 1344.619899] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.621370] CPU: 1 PID: 8890 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1344.622153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.623119] Call Trace: [ 1344.623427] dump_stack+0x107/0x167 [ 1344.623844] should_fail.cold+0x5/0xa [ 1344.624284] ? create_object.isra.0+0x3a/0xa20 [ 1344.624810] should_failslab+0x5/0x20 [ 1344.625242] kmem_cache_alloc+0x5b/0x310 [ 1344.625704] create_object.isra.0+0x3a/0xa20 [ 1344.626198] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1344.626810] kmem_cache_alloc+0x159/0x310 [ 1344.627276] ? trace_hardirqs_on+0x5b/0x180 [ 1344.627779] __d_alloc+0x2a/0x990 [ 1344.628180] d_alloc_pseudo+0x19/0x70 [ 1344.628617] alloc_file_pseudo+0xce/0x250 [ 1344.629095] ? alloc_file+0x5a0/0x5a0 [ 1344.629545] ? shmem_get_inode+0x55c/0xbc0 [ 1344.630034] __shmem_file_setup+0x144/0x320 [ 1344.630536] ? _copy_from_user+0xfb/0x1b0 [ 1344.631040] __do_sys_memfd_create+0x275/0x450 [ 1344.631579] ? memfd_file_seals_ptr+0x170/0x170 [ 1344.632112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1344.632716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1344.633305] do_syscall_64+0x33/0x40 [ 1344.633736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1344.634326] RIP: 0033:0x7ffb8254eb19 [ 1344.634756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.636868] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1344.637748] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1344.638556] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1344.639396] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1344.640204] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1344.641016] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 09:09:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x2848}) [ 1344.665648] loop0: detected capacity change from 0 to 2048 [ 1344.698563] EXT4-fs (loop0): Can't read superblock on 2nd try 09:09:43 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 36) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1359.316536] FAULT_INJECTION: forcing a failure. [ 1359.316536] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.319108] CPU: 0 PID: 8912 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1359.320594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1359.322378] Call Trace: [ 1359.322963] dump_stack+0x107/0x167 [ 1359.323759] should_fail.cold+0x5/0xa [ 1359.324580] ? __alloc_file+0x21/0x320 [ 1359.325419] should_failslab+0x5/0x20 [ 1359.326273] kmem_cache_alloc+0x5b/0x310 [ 1359.327173] __alloc_file+0x21/0x320 [ 1359.327983] alloc_empty_file+0x6d/0x170 [ 1359.328861] alloc_file+0x5e/0x5a0 [ 1359.329643] alloc_file_pseudo+0x16a/0x250 [ 1359.330571] ? alloc_file+0x5a0/0x5a0 [ 1359.331423] ? shmem_get_inode+0x55c/0xbc0 [ 1359.332378] __shmem_file_setup+0x144/0x320 [ 1359.333335] ? _copy_from_user+0xfb/0x1b0 [ 1359.334239] __do_sys_memfd_create+0x275/0x450 [ 1359.335244] ? memfd_file_seals_ptr+0x170/0x170 [ 1359.336253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1359.337367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1359.338500] do_syscall_64+0x33/0x40 [ 1359.339337] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1359.340465] RIP: 0033:0x7ffb8254eb19 [ 1359.341280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1359.345280] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1359.346946] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1359.348503] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1359.350074] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1359.351641] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1359.353200] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 09:09:43 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:09:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x3028}) 09:09:43 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x3}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:09:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00ffffff0f0000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:09:43 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0800}]}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r1}, 0xfffffffffffffc3c, 0x6194, 0x1}) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000340), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 09:09:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 10) 09:09:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1359.360302] kauditd_printk_skb: 33 callbacks suppressed [ 1359.360314] audit: type=1326 audit(1749460183.150:1795): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8907 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b2a1ab19 code=0x7ffc0000 [ 1359.372216] audit: type=1326 audit(1749460183.162:1796): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8900 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1359.375248] audit: type=1326 audit(1749460183.163:1797): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8900 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1359.378246] audit: type=1326 audit(1749460183.163:1798): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8907 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b2a1ab19 code=0x7ffc0000 [ 1359.381763] audit: type=1326 audit(1749460183.166:1799): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8907 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82b2a1ab19 code=0x7ffc0000 [ 1359.385568] audit: type=1326 audit(1749460183.166:1800): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8907 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b2a1ab19 code=0x7ffc0000 [ 1359.388416] audit: type=1326 audit(1749460183.166:1801): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8907 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b2a1ab19 code=0x7ffc0000 [ 1359.391652] audit: type=1326 audit(1749460183.176:1802): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8900 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1359.394796] audit: type=1326 audit(1749460183.180:1803): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8900 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1359.394872] audit: type=1326 audit(1749460183.180:1804): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8900 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1359.396612] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1359.396664] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1359.423831] FAULT_INJECTION: forcing a failure. [ 1359.423831] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.426543] CPU: 0 PID: 8911 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1359.428002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1359.429788] Call Trace: [ 1359.430362] dump_stack+0x107/0x167 09:09:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x3828}) [ 1359.431175] should_fail.cold+0x5/0xa [ 1359.432162] ? create_object.isra.0+0x3a/0xa20 [ 1359.433161] should_failslab+0x5/0x20 [ 1359.433976] kmem_cache_alloc+0x5b/0x310 [ 1359.434851] ? do_blk_trace_setup+0x4cf/0xc10 [ 1359.435801] ? __blk_trace_setup+0xca/0x180 [ 1359.436724] create_object.isra.0+0x3a/0xa20 [ 1359.437668] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1359.438746] kmem_cache_alloc_node+0x169/0x330 [ 1359.439757] alloc_vmap_area+0x148/0x1d10 [ 1359.440632] ? kmem_cache_alloc_node_trace+0x16d/0x340 [ 1359.441766] ? mark_held_locks+0x9e/0xe0 [ 1359.442649] ? purge_vmap_area_lazy+0xc0/0xc0 [ 1359.443611] ? kasan_unpoison_shadow+0x33/0x50 [ 1359.444572] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1359.445657] __get_vm_area_node+0x127/0x340 [ 1359.446570] ? relay_open_buf.part.0+0x4cf/0xc00 [ 1359.447590] get_vm_area_caller+0x70/0xb0 [ 1359.448466] ? relay_open_buf.part.0+0x4cf/0xc00 [ 1359.449484] vmap+0xe9/0x2c0 [ 1359.450134] ? vunmap+0x70/0x70 [ 1359.450851] relay_open_buf.part.0+0x4cf/0xc00 [ 1359.451829] relay_open+0x531/0xa10 [ 1359.452620] do_blk_trace_setup+0x4cf/0xc10 [ 1359.453536] ? _copy_from_user+0xfb/0x1b0 [ 1359.454415] __blk_trace_setup+0xca/0x180 [ 1359.455306] ? do_blk_trace_setup+0xc10/0xc10 [ 1359.456267] blk_trace_ioctl+0x155/0x290 [ 1359.457129] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1359.458146] ? do_vfs_ioctl+0x283/0x10d0 [ 1359.459008] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1359.460106] ? generic_block_fiemap+0x60/0x60 [ 1359.461047] ? lock_downgrade+0x6d0/0x6d0 [ 1359.461919] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1359.462955] blkdev_ioctl+0xc1/0x710 [ 1359.463754] ? blkdev_common_ioctl+0x1930/0x1930 [ 1359.464749] ? selinux_file_ioctl+0xb6/0x270 [ 1359.465686] block_ioctl+0xf9/0x140 [ 1359.466450] ? blkdev_read_iter+0x1c0/0x1c0 [ 1359.467359] __x64_sys_ioctl+0x19a/0x210 [ 1359.468190] do_syscall_64+0x33/0x40 [ 1359.468964] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1359.470026] RIP: 0033:0x7f805ff83b19 [ 1359.470803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1359.475120] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1359.477017] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1359.478774] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1359.480557] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1359.482323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1359.484060] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 09:09:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00fffffff50000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:09:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x4000}) 09:09:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x4028}) 09:09:56 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x8}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:09:56 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 37) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:09:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:09:56 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:09:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 11) 09:09:56 executing program 3: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9, 0x0, 0x0, 0x1f, 0x0, 0x5943, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x1}, 0x10, 0x3f, 0x3, 0x4, 0x100000001, 0xa9a, 0x3, 0x0, 0xfffffff7, 0x0, 0x7a0a}, 0x0, 0xb, r0, 0x2) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x400000, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newpolicy={0xbc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x4}}, [@tmpl={0x4}]}, 0xbc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a0001010000000000000000004d000014fbc071921c7784000000"], 0x1c}}, 0x0) ioctl$FITHAW(r2, 0xc0045878) open$dir(&(0x7f00000003c0)='./file0\x00', 0x222001, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') 09:09:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000fffffff0000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1372.464630] FAULT_INJECTION: forcing a failure. [ 1372.464630] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.467649] CPU: 0 PID: 8939 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1372.469203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1372.470155] FAULT_INJECTION: forcing a failure. [ 1372.470155] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.470932] Call Trace: [ 1372.470972] dump_stack+0x107/0x167 [ 1372.470995] should_fail.cold+0x5/0xa [ 1372.471022] ? kmemleak_scan_area+0xa6/0x360 [ 1372.476290] should_failslab+0x5/0x20 [ 1372.477089] kmem_cache_alloc+0x5b/0x310 [ 1372.478053] kmemleak_scan_area+0xa6/0x360 [ 1372.478934] alloc_vmap_area+0x171/0x1d10 [ 1372.479823] ? kmem_cache_alloc_node_trace+0x16d/0x340 [ 1372.481030] ? mark_held_locks+0x9e/0xe0 [ 1372.481914] ? purge_vmap_area_lazy+0xc0/0xc0 [ 1372.482855] ? kasan_unpoison_shadow+0x33/0x50 [ 1372.483806] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1372.484867] __get_vm_area_node+0x127/0x340 [ 1372.485779] ? relay_open_buf.part.0+0x4cf/0xc00 [ 1372.486764] get_vm_area_caller+0x70/0xb0 [ 1372.487633] ? relay_open_buf.part.0+0x4cf/0xc00 [ 1372.488613] vmap+0xe9/0x2c0 [ 1372.489249] ? vunmap+0x70/0x70 [ 1372.489951] relay_open_buf.part.0+0x4cf/0xc00 [ 1372.490918] relay_open+0x531/0xa10 [ 1372.491706] do_blk_trace_setup+0x4cf/0xc10 [ 1372.492608] ? _copy_from_user+0xfb/0x1b0 [ 1372.493466] __blk_trace_setup+0xca/0x180 [ 1372.494320] ? do_blk_trace_setup+0xc10/0xc10 [ 1372.495287] blk_trace_ioctl+0x155/0x290 [ 1372.496136] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1372.497166] ? do_vfs_ioctl+0x283/0x10d0 [ 1372.498019] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1372.499122] ? generic_block_fiemap+0x60/0x60 [ 1372.500066] ? lock_downgrade+0x6d0/0x6d0 [ 1372.500926] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1372.501936] blkdev_ioctl+0xc1/0x710 [ 1372.502727] ? blkdev_common_ioctl+0x1930/0x1930 [ 1372.503760] ? selinux_file_ioctl+0xb6/0x270 [ 1372.504706] block_ioctl+0xf9/0x140 [ 1372.505465] ? blkdev_read_iter+0x1c0/0x1c0 [ 1372.506390] __x64_sys_ioctl+0x19a/0x210 [ 1372.507251] do_syscall_64+0x33/0x40 [ 1372.508033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1372.509121] RIP: 0033:0x7f805ff83b19 [ 1372.509900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1372.513811] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1372.515404] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1372.516884] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1372.518377] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1372.519885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1372.521382] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1372.522927] CPU: 1 PID: 8951 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1372.523984] kmemleak: Cannot allocate a scan area, scanning the full object [ 1372.524430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1372.524436] Call Trace: [ 1372.524457] dump_stack+0x107/0x167 [ 1372.524478] should_fail.cold+0x5/0xa [ 1372.524498] ? create_object.isra.0+0x3a/0xa20 [ 1372.524519] should_failslab+0x5/0x20 [ 1372.524536] kmem_cache_alloc+0x5b/0x310 [ 1372.524562] create_object.isra.0+0x3a/0xa20 [ 1372.524577] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1372.524601] kmem_cache_alloc+0x159/0x310 [ 1372.524625] __alloc_file+0x21/0x320 [ 1372.524643] alloc_empty_file+0x6d/0x170 [ 1372.524662] alloc_file+0x5e/0x5a0 [ 1372.538022] alloc_file_pseudo+0x16a/0x250 [ 1372.538907] ? alloc_file+0x5a0/0x5a0 [ 1372.539726] ? shmem_get_inode+0x55c/0xbc0 [ 1372.540637] __shmem_file_setup+0x144/0x320 [ 1372.541532] ? _copy_from_user+0xfb/0x1b0 [ 1372.542413] __do_sys_memfd_create+0x275/0x450 [ 1372.543376] ? memfd_file_seals_ptr+0x170/0x170 [ 1372.544355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1372.545479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1372.546564] do_syscall_64+0x33/0x40 [ 1372.547356] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1372.548418] RIP: 0033:0x7ffb8254eb19 [ 1372.549191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1372.553037] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1372.554644] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1372.556147] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1372.557624] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1372.559129] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1372.560639] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 [ 1372.566670] loop0: detected capacity change from 0 to 2048 [ 1372.618202] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1372.632038] kauditd_printk_skb: 26 callbacks suppressed [ 1372.632055] audit: type=1326 audit(1749460196.420:1831): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1372.640266] audit: type=1326 audit(1749460196.422:1832): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1372.655172] audit: type=1326 audit(1749460196.422:1833): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1372.673685] audit: type=1326 audit(1749460196.451:1834): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1372.684240] audit: type=1326 audit(1749460196.451:1835): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1372.689197] audit: type=1326 audit(1749460196.452:1836): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:09:56 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 38) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1372.694907] audit: type=1326 audit(1749460196.452:1837): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:09:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x4828}) [ 1372.699999] audit: type=1326 audit(1749460196.452:1838): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1372.704723] audit: type=1326 audit(1749460196.452:1839): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1372.709435] audit: type=1326 audit(1749460196.475:1840): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:09:56 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto(r2, &(0x7f0000000080)="cd57713fddaa61b991c49a3bdfa0444d011b8959aa50667e64ec920ca7ca293f709cbc2ae3e7f15713e0197e7eb962d7953b6a084d48d9cbbec23758a01823eb2e2aff4dc87fd348d04661829f3498f27dcdd68e8abef32986b17579e728a22d20808a4b4d00442b70794e466fc721b85529f83b94bd69afb28a37c10da27a43c12d59cbcd055750cad7f1bbc84946c42b7e13521f16ab1c649632e571c9bae8bacfb80bc7883612c83f4e7ff830b51c970196240d62bff724f62e465c44dc6c753ca78f", 0xc4, 0x4004800, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x4, 0x3, {0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb23}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) writev(r3, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) 09:09:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00f5ffffff0000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1372.736390] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 09:09:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 12) 09:09:56 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x300}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1372.797850] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1372.800145] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1372.801784] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1372.803337] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 1372.805147] print_req_error: 912 callbacks suppressed [ 1372.805164] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 1372.836618] FAULT_INJECTION: forcing a failure. [ 1372.836618] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.839278] CPU: 0 PID: 8967 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1372.840758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1372.842562] Call Trace: [ 1372.843145] dump_stack+0x107/0x167 [ 1372.843941] should_fail.cold+0x5/0xa [ 1372.844771] ? relay_create_buf_file+0x4d/0x180 [ 1372.845781] should_failslab+0x5/0x20 [ 1372.846582] kmem_cache_alloc_trace+0x55/0x320 [ 1372.847584] relay_create_buf_file+0x4d/0x180 [ 1372.848550] relay_open_buf.part.0+0x7de/0xc00 [ 1372.849518] relay_open+0x531/0xa10 09:09:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xa0000}) [ 1372.850301] do_blk_trace_setup+0x4cf/0xc10 [ 1372.851382] ? _copy_from_user+0xfb/0x1b0 [ 1372.852289] __blk_trace_setup+0xca/0x180 [ 1372.853174] ? do_blk_trace_setup+0xc10/0xc10 [ 1372.854159] blk_trace_ioctl+0x155/0x290 [ 1372.855045] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1372.856089] ? do_vfs_ioctl+0x283/0x10d0 [ 1372.856943] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1372.858048] ? generic_block_fiemap+0x60/0x60 [ 1372.858999] ? lock_downgrade+0x6d0/0x6d0 [ 1372.859896] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1372.860938] blkdev_ioctl+0xc1/0x710 [ 1372.861732] ? blkdev_common_ioctl+0x1930/0x1930 [ 1372.862725] ? selinux_file_ioctl+0xb6/0x270 [ 1372.863695] block_ioctl+0xf9/0x140 [ 1372.864480] ? blkdev_read_iter+0x1c0/0x1c0 [ 1372.865413] __x64_sys_ioctl+0x19a/0x210 [ 1372.866286] do_syscall_64+0x33/0x40 [ 1372.867101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1372.868187] RIP: 0033:0x7f805ff83b19 [ 1372.868975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1372.872822] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1372.874456] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1372.875997] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1372.877530] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1372.879081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1372.880613] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1372.890457] FAULT_INJECTION: forcing a failure. [ 1372.890457] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.892971] CPU: 1 PID: 8976 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1372.894434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1372.896181] Call Trace: [ 1372.896734] dump_stack+0x107/0x167 [ 1372.897511] should_fail.cold+0x5/0xa [ 1372.898338] ? security_file_alloc+0x34/0x170 [ 1372.899315] should_failslab+0x5/0x20 [ 1372.900132] kmem_cache_alloc+0x5b/0x310 [ 1372.900994] security_file_alloc+0x34/0x170 [ 1372.901908] __alloc_file+0xb7/0x320 [ 1372.902692] alloc_empty_file+0x6d/0x170 [ 1372.903560] alloc_file+0x5e/0x5a0 [ 1372.904321] alloc_file_pseudo+0x16a/0x250 [ 1372.905214] ? alloc_file+0x5a0/0x5a0 [ 1372.906033] ? shmem_get_inode+0x55c/0xbc0 [ 1372.906939] __shmem_file_setup+0x144/0x320 [ 1372.907876] ? _copy_from_user+0xfb/0x1b0 [ 1372.908774] __do_sys_memfd_create+0x275/0x450 [ 1372.909743] ? memfd_file_seals_ptr+0x170/0x170 [ 1372.910727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1372.911832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1372.912943] do_syscall_64+0x33/0x40 [ 1372.913727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1372.914804] RIP: 0033:0x7ffb8254eb19 [ 1372.915603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1372.919532] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1372.921150] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1372.922665] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1372.924173] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1372.925676] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1372.927219] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 [ 1372.929272] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1372.931693] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1372.933158] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1372.934628] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1372.936438] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 09:09:56 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1372.938738] buffer_io_error: 926 callbacks suppressed [ 1372.938749] Buffer I/O error on dev sr0, logical block 0, async page read [ 1372.941918] Buffer I/O error on dev sr0, logical block 1, async page read [ 1372.943454] Buffer I/O error on dev sr0, logical block 2, async page read [ 1372.944950] Buffer I/O error on dev sr0, logical block 3, async page read [ 1372.946454] Buffer I/O error on dev sr0, logical block 4, async page read [ 1372.947970] Buffer I/O error on dev sr0, logical block 5, async page read [ 1372.949484] Buffer I/O error on dev sr0, logical block 6, async page read [ 1372.950998] Buffer I/O error on dev sr0, logical block 7, async page read [ 1372.952694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:09:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1372.953896] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1372.956243] Buffer I/O error on dev sr0, logical block 0, async page read [ 1372.958050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.959489] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 0 [ 1372.961979] Buffer I/O error on dev sr0, logical block 1, async page read [ 1372.965145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.967208] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1372.969513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.970692] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1372.977400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.978576] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1372.980931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.982136] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1372.984463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.985670] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1372.988025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.989217] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1372.991510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.992892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.994337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.995698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.997088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.998531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1372.999954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.001531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.003063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.004588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.006721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.008645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.019858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.021332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.023240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.025260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.026580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.027987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.035761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.037350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.038695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.041249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.044384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.055426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.068293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.078283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.090270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.094730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.098284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.100111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.104870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.106469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.110389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.112220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.114206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.117304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.119344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.121488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.122865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.124290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:09:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000100bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1373.132722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.134287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.135644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.137046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.138386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.139856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.141174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.142508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.143846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.145198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.146503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.147880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.149296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.150990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.152570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.154586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.156424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.159455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.161306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.163416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.165297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.167261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.169623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:09:56 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 39) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1373.173834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.176639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.178547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.180628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:09:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 13) [ 1373.183699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.185285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.186613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.188056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.189791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.191130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.192500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.194087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.195441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.196825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.198216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.199573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.200982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.202389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.203717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.205085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.206401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.207840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.209445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.211835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.213617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.215559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.217761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.219934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.221484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.223815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.225365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:09:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x3ffff8}) [ 1373.226879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.228623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.230256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.231600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.233220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.234722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.236070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.237666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.239533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.241554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.243625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.245533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.247504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.249735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.252256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.253644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.255211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.256538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.258099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.259433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.260889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.262284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.263606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.265253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.266815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.268794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.270379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.272305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.273840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.275396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.276970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.279823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.281420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.283493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.285488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.287314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.289215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.290795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.292392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.293788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.298588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.299934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.301262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.302588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.303975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.305274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.306579] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1373.308661] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1373.310817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.312180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.313502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.314805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.316157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.317466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.318967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.320312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.321631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.323137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.324474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.325852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.327197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.328537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.329932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.331286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.332625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.334137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.335489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.336811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.338154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.339557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.341113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.342448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.344079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.345529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.346839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.348201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.349518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.350844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.352160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.353488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.354844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.357634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.359510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.361309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.363330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.369722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.383233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:09:57 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:09:57 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000200bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1373.392442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.403334] FAULT_INJECTION: forcing a failure. [ 1373.403334] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.405766] CPU: 1 PID: 8996 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1373.407219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1373.408966] Call Trace: [ 1373.409524] dump_stack+0x107/0x167 [ 1373.410294] should_fail.cold+0x5/0xa [ 1373.411120] ? create_object.isra.0+0x3a/0xa20 [ 1373.412088] should_failslab+0x5/0x20 [ 1373.412885] kmem_cache_alloc+0x5b/0x310 [ 1373.413738] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1373.414892] create_object.isra.0+0x3a/0xa20 [ 1373.415815] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1373.416877] kmem_cache_alloc+0x159/0x310 [ 1373.417757] security_file_alloc+0x34/0x170 [ 1373.418671] __alloc_file+0xb7/0x320 [ 1373.419477] alloc_empty_file+0x6d/0x170 [ 1373.420353] alloc_file+0x5e/0x5a0 [ 1373.421100] alloc_file_pseudo+0x16a/0x250 [ 1373.421987] ? alloc_file+0x5a0/0x5a0 [ 1373.422797] ? shmem_get_inode+0x55c/0xbc0 [ 1373.423717] __shmem_file_setup+0x144/0x320 [ 1373.424633] ? _copy_from_user+0xfb/0x1b0 [ 1373.425503] __do_sys_memfd_create+0x275/0x450 [ 1373.426467] ? memfd_file_seals_ptr+0x170/0x170 [ 1373.427461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1373.428564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1373.429677] do_syscall_64+0x33/0x40 [ 1373.430480] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1373.431571] RIP: 0033:0x7ffb8254eb19 [ 1373.432349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1373.436296] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1373.437900] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb8254eb19 [ 1373.439417] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb825a80fb [ 1373.440953] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1373.442492] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1373.444017] R13: 0000000020000100 R14: 0000000000000800 R15: 00000000200003c0 [ 1373.446316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.450070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.453711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.455176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.456546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.458029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.459490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.460862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.462255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.463755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.465296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.466731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.468212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.469740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.471184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.472551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.473964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.475364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.476605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:09:57 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xfa4}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1373.480483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.481358] FAULT_INJECTION: forcing a failure. [ 1373.481358] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.483264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.485276] CPU: 0 PID: 8995 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1373.485441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.486735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1373.486741] Call Trace: [ 1373.486770] dump_stack+0x107/0x167 [ 1373.486795] should_fail.cold+0x5/0xa [ 1373.488089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.489651] ? create_object.isra.0+0x3a/0xa20 [ 1373.489673] should_failslab+0x5/0x20 [ 1373.489691] kmem_cache_alloc+0x5b/0x310 [ 1373.489717] create_object.isra.0+0x3a/0xa20 [ 1373.490452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.491007] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1373.491034] kmem_cache_alloc_trace+0x151/0x320 [ 1373.491063] relay_create_buf_file+0x4d/0x180 [ 1373.492083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.492961] relay_open_buf.part.0+0x7de/0xc00 [ 1373.492996] relay_open+0x531/0xa10 [ 1373.494157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.494731] do_blk_trace_setup+0x4cf/0xc10 [ 1373.495779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.496485] ? _copy_from_user+0xfb/0x1b0 [ 1373.496512] __blk_trace_setup+0xca/0x180 [ 1373.498482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.498656] ? do_blk_trace_setup+0xc10/0xc10 [ 1373.500228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.500584] blk_trace_ioctl+0x155/0x290 [ 1373.502310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.502602] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1373.504996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.505350] ? do_vfs_ioctl+0x283/0x10d0 [ 1373.505373] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1373.507168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.507352] ? generic_block_fiemap+0x60/0x60 [ 1373.509779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.510228] ? lock_downgrade+0x6d0/0x6d0 [ 1373.510247] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1373.510272] blkdev_ioctl+0xc1/0x710 [ 1373.511828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.512222] ? blkdev_common_ioctl+0x1930/0x1930 [ 1373.512253] ? selinux_file_ioctl+0xb6/0x270 [ 1373.513792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.514368] block_ioctl+0xf9/0x140 [ 1373.514385] ? blkdev_read_iter+0x1c0/0x1c0 [ 1373.514406] __x64_sys_ioctl+0x19a/0x210 [ 1373.515801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.516350] do_syscall_64+0x33/0x40 [ 1373.516370] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1373.516386] RIP: 0033:0x7f805ff83b19 [ 1373.517694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.518582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1373.518592] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1373.518617] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1373.519782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.520646] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1373.520656] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1373.520666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1373.520683] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1373.522870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.556244] loop0: detected capacity change from 0 to 2048 [ 1373.566770] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1373.568822] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1373.570295] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1373.571674] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 1373.573510] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1373.575564] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1373.577785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.580194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.581566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.583161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.586894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.588372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.589688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.591392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.593232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.594765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.596349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.597894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.599480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.601092] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1373.606416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.611363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.615637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.617198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.624019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.625309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.626755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.629650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.631038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.632324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.634489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.637255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.644387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.648025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.649343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.650774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.652106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.653472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.654790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.656383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.658239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.660445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.661729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.663250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.664539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.665868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.667147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.668412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.669681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.670975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.672276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.674364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.677655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.680472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.684366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.717486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.723407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.731397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.733478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.735312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.743720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.745504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.746855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.748183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.749519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.750939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.752299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.753698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.755073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.756388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.757704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.759083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.762065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.763380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.764703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.766708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.770363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.772389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.774681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.776557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.778542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.780428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.784393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.786832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.788168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.792504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.793817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.795320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.796678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.798306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.799625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.801390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.803475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.805536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.807447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.809380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.811294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.813464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.818468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.820105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.823610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.825059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.826312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.827632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.829166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.830413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.831683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.833718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.835515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.838359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.840279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.843345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.846017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.847802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.850520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.852153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.853534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.857026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.859016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.860502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.862079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.863644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.865137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.866897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.868686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.870433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.872491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.874290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.876289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.878258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.883368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.884947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.886427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.887957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.889417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.892814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.894270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.895763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.897432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.899299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.901209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.903054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.904523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.906002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.907397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.908799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.910233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.911651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.913602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.915580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.917159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.918645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.920205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.921685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.923186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.924866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.926277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.928203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.930177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.931665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.933303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.934679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.936198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.937478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.939276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.940724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.942203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.943782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.945233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.946707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.948158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.949835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.951751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.953823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.955466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.956835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.958363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.959777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.961222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.962500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.964483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.966433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.968043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.969461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.971092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.972518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.974059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.975687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.977933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.979697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.981303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.984374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1373.985498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1387.433933] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1387.436004] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1387.440116] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1387.442159] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:10:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x400000}) 09:10:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000200bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:10:11 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 40) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:10:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000300bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:10:11 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x1261}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:10:11 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:10:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:10:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 14) [ 1387.451630] FAULT_INJECTION: forcing a failure. [ 1387.451630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1387.455995] CPU: 1 PID: 9026 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1387.457832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1387.460038] Call Trace: [ 1387.460759] dump_stack+0x107/0x167 [ 1387.461740] should_fail.cold+0x5/0xa [ 1387.462761] __alloc_pages_nodemask+0x182/0x600 [ 1387.464015] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1387.465606] ? lock_downgrade+0x6d0/0x6d0 [ 1387.466774] ? lock_acquire+0x197/0x470 [ 1387.466865] alloc_pages_vma+0xbb/0x410 [ 1387.468887] shmem_alloc_page+0x10f/0x1e0 [ 1387.469993] ? shmem_init_inode+0x20/0x20 [ 1387.471181] ? percpu_counter_add_batch+0x8b/0x140 [ 1387.472541] ? __vm_enough_memory+0x184/0x360 [ 1387.473755] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1387.475342] ? shmem_unuse_inode+0xf60/0xf60 [ 1387.476440] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 1387.477708] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1387.478976] shmem_write_begin+0xf7/0x1d0 [ 1387.480074] generic_perform_write+0x20a/0x4f0 [ 1387.481042] ? page_cache_prev_miss+0x310/0x310 [ 1387.481999] ? evict_inodes+0x470/0x470 [ 1387.482820] ? generic_write_checks+0x2ad/0x390 [ 1387.483800] __generic_file_write_iter+0x39d/0x5d0 [ 1387.484822] generic_file_write_iter+0xdb/0x230 [ 1387.485778] ? iov_iter_init+0x3c/0x130 [ 1387.486609] new_sync_write+0x42c/0x660 [ 1387.487441] ? new_sync_read+0x6f0/0x6f0 [ 1387.488278] ? __x64_sys_pwrite64+0x201/0x260 [ 1387.489198] ? lock_release+0x680/0x680 [ 1387.490013] ? selinux_file_permission+0x92/0x520 [ 1387.491013] ? security_file_permission+0xb1/0xe0 [ 1387.492026] vfs_write+0x7c0/0xb10 [ 1387.492775] __x64_sys_pwrite64+0x201/0x260 [ 1387.493679] ? ksys_pwrite64+0x1b0/0x1b0 [ 1387.494528] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1387.495628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1387.496709] do_syscall_64+0x33/0x40 [ 1387.497486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1387.498551] RIP: 0033:0x7ffb82501ab7 [ 1387.499338] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1387.503218] RSP: 002b:00007ffb7fac3f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1387.504807] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb82501ab7 [ 1387.506295] RDX: 000000000000003a RSI: 0000000020010000 RDI: 0000000000000004 [ 1387.507800] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1387.509286] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1387.510780] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 09:10:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c746572000000000000040000000000000000000000000000000068f56dbe000000000000000000000000000000000000000000000000000000fff400000000010000000000000000000000000000000000000000000000000000000000000000000000000000f53f3503b27e28f9090ea21fd4d933"], 0x78) [ 1387.586412] FAULT_INJECTION: forcing a failure. [ 1387.586412] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.589604] CPU: 1 PID: 9035 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1387.591046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1387.592813] Call Trace: [ 1387.593376] dump_stack+0x107/0x167 [ 1387.594153] should_fail.cold+0x5/0xa [ 1387.594966] ? __d_alloc+0x2a/0x990 [ 1387.595761] should_failslab+0x5/0x20 [ 1387.596569] kmem_cache_alloc+0x5b/0x310 [ 1387.597437] __d_alloc+0x2a/0x990 [ 1387.598178] d_alloc_parallel+0x111/0x1bc0 [ 1387.599111] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1387.600213] ? SOFTIRQ_verbose+0x10/0x10 [ 1387.601075] ? __d_lookup_rcu+0x6d0/0x6d0 [ 1387.601951] ? mark_lock+0xf5/0x2df0 [ 1387.602746] ? lockdep_init_map_type+0x2c7/0x780 [ 1387.603763] ? lockdep_init_map_type+0x2c7/0x780 [ 1387.604778] __lookup_slow+0x193/0x490 [ 1387.605604] ? lookup_open.isra.0+0x1270/0x1270 [ 1387.606600] ? __d_lookup+0x3bf/0x760 [ 1387.607438] ? d_lookup+0xcc/0x130 [ 1387.608195] lookup_one_len+0x167/0x1a0 [ 1387.609032] ? __lookup_slow+0x490/0x490 [ 1387.609888] ? down_write_killable+0x180/0x180 [ 1387.610854] ? do_raw_spin_unlock+0x4f/0x220 [ 1387.611794] ? mntput+0xc/0x90 [ 1387.612483] start_creating.part.0+0x10a/0x230 [ 1387.613461] __debugfs_create_file+0xdb/0x580 [ 1387.614411] ? blk_trace_remove+0x40/0x40 [ 1387.615309] relay_create_buf_file+0xf6/0x180 [ 1387.616257] relay_open_buf.part.0+0x7de/0xc00 [ 1387.617235] relay_open+0x531/0xa10 [ 1387.618014] do_blk_trace_setup+0x4cf/0xc10 [ 1387.618925] ? _copy_from_user+0xfb/0x1b0 [ 1387.619811] __blk_trace_setup+0xca/0x180 [ 1387.620685] ? do_blk_trace_setup+0xc10/0xc10 [ 1387.621660] blk_trace_ioctl+0x155/0x290 [ 1387.622522] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1387.623574] ? do_vfs_ioctl+0x283/0x10d0 [ 1387.624434] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1387.625540] ? generic_block_fiemap+0x60/0x60 [ 1387.626498] ? lock_downgrade+0x6d0/0x6d0 [ 1387.627409] blkdev_ioctl+0xc1/0x710 [ 1387.628212] ? blkdev_common_ioctl+0x1930/0x1930 [ 1387.629210] ? selinux_file_ioctl+0xb6/0x270 [ 1387.630145] block_ioctl+0xf9/0x140 [ 1387.630915] ? blkdev_read_iter+0x1c0/0x1c0 [ 1387.631835] __x64_sys_ioctl+0x19a/0x210 [ 1387.632699] do_syscall_64+0x33/0x40 [ 1387.633503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1387.634576] RIP: 0033:0x7f805ff83b19 [ 1387.635379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1387.639233] RSP: 002b:00007f805d4d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1387.640861] RAX: ffffffffffffffda RBX: 00007f8060097020 RCX: 00007f805ff83b19 [ 1387.642367] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1387.643882] RBP: 00007f805d4d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1387.645388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1387.646890] R13: 00007ffd0261caef R14: 00007f805d4d8300 R15: 0000000000022000 [ 1387.649313] kauditd_printk_skb: 29 callbacks suppressed [ 1387.649330] audit: type=1326 audit(1749460211.375:1870): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9017 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1387.656335] audit: type=1326 audit(1749460211.375:1871): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9017 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:10:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000900bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1387.669398] audit: type=1326 audit(1749460211.376:1872): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9017 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1387.674300] loop0: detected capacity change from 0 to 2048 [ 1387.700263] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1387.703758] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1387.705806] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1387.717672] audit: type=1326 audit(1749460211.376:1873): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9017 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1387.733492] audit: type=1326 audit(1749460211.377:1874): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9017 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1387.751079] audit: type=1326 audit(1749460211.377:1875): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9017 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1387.769040] audit: type=1326 audit(1749460211.377:1876): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9017 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1387.789319] audit: type=1326 audit(1749460211.377:1877): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9017 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1387.803568] audit: type=1326 audit(1749460211.377:1878): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9017 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1387.815312] audit: type=1326 audit(1749460211.377:1879): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9017 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:10:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 15) 09:10:24 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 41) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1401.194367] FAULT_INJECTION: forcing a failure. [ 1401.194367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1401.195992] CPU: 1 PID: 9051 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1401.196887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1401.197987] Call Trace: [ 1401.198007] dump_stack+0x107/0x167 [ 1401.198021] should_fail.cold+0x5/0xa [ 1401.198040] iov_iter_copy_from_user_atomic+0x49b/0xdb0 09:10:24 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1401.198059] ? shmem_write_begin+0xf7/0x1d0 [ 1401.198070] ? shmem_write_begin+0x100/0x1d0 [ 1401.198088] generic_perform_write+0x279/0x4f0 [ 1401.198107] ? page_cache_prev_miss+0x310/0x310 [ 1401.198122] ? evict_inodes+0x470/0x470 [ 1401.198135] ? generic_write_checks+0x2ad/0x390 09:10:24 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x2000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:10:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x1000000}) 09:10:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:10:24 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x0, 0x4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}, {0x0}, {0x0}], 0x33}, 0x0, 0x4008000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:10:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000d00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1401.198153] __generic_file_write_iter+0x39d/0x5d0 [ 1401.198170] generic_file_write_iter+0xdb/0x230 [ 1401.198179] ? iov_iter_init+0x3c/0x130 09:10:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000e00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1401.198195] new_sync_write+0x42c/0x660 [ 1401.198209] ? new_sync_read+0x6f0/0x6f0 [ 1401.198222] ? __x64_sys_pwrite64+0x201/0x260 [ 1401.198239] ? lock_release+0x680/0x680 [ 1401.198252] ? selinux_file_permission+0x92/0x520 09:10:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 16) [ 1401.198268] ? security_file_permission+0xb1/0xe0 [ 1401.198287] vfs_write+0x7c0/0xb10 [ 1401.198305] __x64_sys_pwrite64+0x201/0x260 [ 1401.198318] ? ksys_pwrite64+0x1b0/0x1b0 [ 1401.198333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1401.198347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1401.198361] do_syscall_64+0x33/0x40 [ 1401.198373] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1401.198382] RIP: 0033:0x7ffb82501ab7 09:10:25 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1401.198393] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b 09:10:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1401.198399] RSP: 002b:00007ffb7fac3f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1401.198412] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb82501ab7 [ 1401.198419] RDX: 000000000000003a RSI: 0000000020010000 RDI: 0000000000000004 [ 1401.198425] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1401.198432] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1401.198439] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1401.221876] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s 09:10:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x2000000}) 09:10:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000fffffff500bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1401.221950] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1401.238681] loop0: detected capacity change from 0 to 2048 [ 1401.245710] EXT4-fs (loop0): Can't read superblock on 2nd try 09:10:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 17) [ 1401.276026] kauditd_printk_skb: 3 callbacks suppressed [ 1401.276051] audit: type=1326 audit(1749460225.066:1883): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9049 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1401.277079] audit: type=1326 audit(1749460225.067:1884): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9049 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1401.278549] audit: type=1326 audit(1749460225.068:1885): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9049 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:10:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000fffffff00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1401.280579] audit: type=1326 audit(1749460225.070:1886): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9049 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1401.281894] audit: type=1326 audit(1749460225.072:1887): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9049 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1401.282821] audit: type=1326 audit(1749460225.073:1888): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9049 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1401.288639] audit: type=1326 audit(1749460225.078:1889): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9049 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1401.291802] audit: type=1326 audit(1749460225.080:1890): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9049 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1401.293176] audit: type=1326 audit(1749460225.083:1891): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9049 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1401.294729] audit: type=1326 audit(1749460225.084:1892): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9049 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1401.296472] FAULT_INJECTION: forcing a failure. [ 1401.296472] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.296547] CPU: 1 PID: 9066 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1401.296555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1401.296559] Call Trace: [ 1401.296578] dump_stack+0x107/0x167 [ 1401.296592] should_fail.cold+0x5/0xa [ 1401.296607] ? create_object.isra.0+0x3a/0xa20 [ 1401.296623] should_failslab+0x5/0x20 [ 1401.296636] kmem_cache_alloc+0x5b/0x310 [ 1401.296652] create_object.isra.0+0x3a/0xa20 09:10:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1401.296662] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1401.296679] kmem_cache_alloc+0x159/0x310 [ 1401.296697] __d_alloc+0x2a/0x990 [ 1401.296712] d_alloc_parallel+0x111/0x1bc0 [ 1401.296738] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1401.296750] ? SOFTIRQ_verbose+0x10/0x10 [ 1401.296762] ? __d_lookup_rcu+0x6d0/0x6d0 [ 1401.296772] ? mark_lock+0xf5/0x2df0 [ 1401.296787] ? lockdep_init_map_type+0x2c7/0x780 [ 1401.296801] ? lockdep_init_map_type+0x2c7/0x780 [ 1401.296820] __lookup_slow+0x193/0x490 [ 1401.296832] ? lookup_open.isra.0+0x1270/0x1270 [ 1401.296850] ? __d_lookup+0x3bf/0x760 [ 1401.296869] ? d_lookup+0xcc/0x130 [ 1401.296889] lookup_one_len+0x167/0x1a0 [ 1401.296899] ? __lookup_slow+0x490/0x490 [ 1401.296910] ? down_write_killable+0x180/0x180 [ 1401.296921] ? do_raw_spin_unlock+0x4f/0x220 [ 1401.296934] ? mntput+0xc/0x90 [ 1401.296952] start_creating.part.0+0x10a/0x230 [ 1401.296967] __debugfs_create_file+0xdb/0x580 [ 1401.296981] ? blk_trace_remove+0x40/0x40 [ 1401.296994] relay_create_buf_file+0xf6/0x180 [ 1401.297008] relay_open_buf.part.0+0x7de/0xc00 [ 1401.297029] relay_open+0x531/0xa10 [ 1401.297047] do_blk_trace_setup+0x4cf/0xc10 [ 1401.297061] ? _copy_from_user+0xfb/0x1b0 [ 1401.297074] __blk_trace_setup+0xca/0x180 [ 1401.297086] ? do_blk_trace_setup+0xc10/0xc10 [ 1401.297115] blk_trace_ioctl+0x155/0x290 [ 1401.297127] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1401.297137] ? do_vfs_ioctl+0x283/0x10d0 [ 1401.297150] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1401.297162] ? generic_block_fiemap+0x60/0x60 [ 1401.297173] ? lock_downgrade+0x6d0/0x6d0 [ 1401.297184] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1401.297200] blkdev_ioctl+0xc1/0x710 [ 1401.297213] ? blkdev_common_ioctl+0x1930/0x1930 [ 1401.297228] ? selinux_file_ioctl+0xb6/0x270 [ 1401.297244] block_ioctl+0xf9/0x140 [ 1401.297254] ? blkdev_read_iter+0x1c0/0x1c0 [ 1401.297267] __x64_sys_ioctl+0x19a/0x210 [ 1401.297282] do_syscall_64+0x33/0x40 [ 1401.297294] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1401.297303] RIP: 0033:0x7f805ff83b19 [ 1401.297315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1401.297321] RSP: 002b:00007f805d4d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1401.297335] RAX: ffffffffffffffda RBX: 00007f8060097020 RCX: 00007f805ff83b19 [ 1401.297342] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1401.297348] RBP: 00007f805d4d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1401.297355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1401.297362] R13: 00007ffd0261caef R14: 00007f805d4d8300 R15: 0000000000022000 [ 1401.322308] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1401.322341] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1401.382267] FAULT_INJECTION: forcing a failure. [ 1401.382267] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.382282] CPU: 1 PID: 9075 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1401.382288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1401.382291] Call Trace: [ 1401.382308] dump_stack+0x107/0x167 [ 1401.382322] should_fail.cold+0x5/0xa [ 1401.382335] ? getname_flags.part.0+0x50/0x4f0 [ 1401.382349] should_failslab+0x5/0x20 [ 1401.382360] kmem_cache_alloc+0x5b/0x310 [ 1401.382371] ? new_sync_write+0x499/0x660 [ 1401.382385] getname_flags.part.0+0x50/0x4f0 [ 1401.382397] getname+0x8e/0xd0 [ 1401.382408] do_sys_openat2+0xf9/0x4d0 [ 1401.382425] ? build_open_flags+0x6f0/0x6f0 [ 1401.382443] ? rcu_read_lock_any_held+0x75/0xa0 [ 1401.382456] __x64_sys_openat+0x13f/0x1f0 [ 1401.382467] ? __ia32_sys_open+0x1c0/0x1c0 [ 1401.382484] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1401.382496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1401.382509] do_syscall_64+0x33/0x40 [ 1401.382520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1401.382527] RIP: 0033:0x7ffb82501a04 [ 1401.382538] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1401.382544] RSP: 002b:00007ffb7fac3ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1401.382556] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb82501a04 [ 1401.382562] RDX: 0000000000000002 RSI: 00007ffb7fac4000 RDI: 00000000ffffff9c [ 1401.382568] RBP: 00007ffb7fac4000 R08: 0000000000000000 R09: ffffffffffffffff [ 1401.382574] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1401.382580] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1401.458404] FAULT_INJECTION: forcing a failure. [ 1401.458404] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.458418] CPU: 1 PID: 9085 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1401.458424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1401.458428] Call Trace: [ 1401.458445] dump_stack+0x107/0x167 [ 1401.458457] should_fail.cold+0x5/0xa [ 1401.458471] ? create_object.isra.0+0x3a/0xa20 [ 1401.458484] should_failslab+0x5/0x20 [ 1401.458495] kmem_cache_alloc+0x5b/0x310 [ 1401.458508] ? __generic_file_write_iter+0x1a4/0x5d0 [ 1401.458521] create_object.isra.0+0x3a/0xa20 [ 1401.458530] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1401.458543] kmem_cache_alloc+0x159/0x310 [ 1401.458553] ? new_sync_write+0x499/0x660 [ 1401.458567] getname_flags.part.0+0x50/0x4f0 [ 1401.458579] getname+0x8e/0xd0 [ 1401.458590] do_sys_openat2+0xf9/0x4d0 [ 1401.458602] ? build_open_flags+0x6f0/0x6f0 [ 1401.458619] ? rcu_read_lock_any_held+0x75/0xa0 [ 1401.458633] __x64_sys_openat+0x13f/0x1f0 [ 1401.458643] ? __ia32_sys_open+0x1c0/0x1c0 [ 1401.458659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1401.458672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1401.458684] do_syscall_64+0x33/0x40 [ 1401.458695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1401.458703] RIP: 0033:0x7ffb82501a04 [ 1401.458713] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1401.458719] RSP: 002b:00007ffb7fac3ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1401.458731] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb82501a04 [ 1401.458737] RDX: 0000000000000002 RSI: 00007ffb7fac4000 RDI: 00000000ffffff9c [ 1401.458744] RBP: 00007ffb7fac4000 R08: 0000000000000000 R09: ffffffffffffffff [ 1401.458750] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1401.458756] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1401.468857] loop0: detected capacity change from 0 to 2048 [ 1401.529325] EXT4-fs (loop0): Can't read superblock on 2nd try 09:10:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 18) 09:10:38 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 42) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:10:38 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x6112}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:10:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000ffffffff00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:10:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x3000000}) 09:10:38 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:10:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1414.920632] FAULT_INJECTION: forcing a failure. [ 1414.920632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1414.922139] CPU: 0 PID: 9105 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1414.922968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1414.923986] Call Trace: [ 1414.924313] dump_stack+0x107/0x167 [ 1414.924758] should_fail.cold+0x5/0xa [ 1414.925228] strncpy_from_user+0x34/0x470 [ 1414.925735] getname_flags.part.0+0x95/0x4f0 [ 1414.926274] getname+0x8e/0xd0 [ 1414.926666] do_sys_openat2+0xf9/0x4d0 [ 1414.927139] ? build_open_flags+0x6f0/0x6f0 [ 1414.927677] ? rcu_read_lock_any_held+0x75/0xa0 [ 1414.928250] __x64_sys_openat+0x13f/0x1f0 [ 1414.928753] ? __ia32_sys_open+0x1c0/0x1c0 [ 1414.929273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1414.929910] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1414.930534] do_syscall_64+0x33/0x40 [ 1414.930993] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1414.931623] RIP: 0033:0x7ffb82501a04 [ 1414.932074] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1414.934304] RSP: 002b:00007ffb7fac3ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1414.935228] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb82501a04 [ 1414.936103] RDX: 0000000000000002 RSI: 00007ffb7fac4000 RDI: 00000000ffffff9c [ 1414.936965] RBP: 00007ffb7fac4000 R08: 0000000000000000 R09: ffffffffffffffff [ 1414.937823] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1414.938688] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1414.948850] FAULT_INJECTION: forcing a failure. [ 1414.948850] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.950585] CPU: 1 PID: 9111 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1414.951531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1414.952646] Call Trace: [ 1414.953005] dump_stack+0x107/0x167 [ 1414.953495] should_fail.cold+0x5/0xa [ 1414.954016] ? alloc_inode+0x171/0x240 [ 1414.954543] should_failslab+0x5/0x20 [ 1414.955057] kmem_cache_alloc+0x5b/0x310 [ 1414.955608] ? __lookup_slow+0x490/0x490 [ 1414.956163] alloc_inode+0x171/0x240 [ 1414.956667] new_inode+0x23/0x250 [ 1414.957136] debugfs_get_inode+0x1a/0x130 [ 1414.957694] __debugfs_create_file+0x14e/0x580 [ 1414.958322] ? blk_trace_remove+0x40/0x40 [ 1414.958896] relay_create_buf_file+0xf6/0x180 [ 1414.959499] relay_open_buf.part.0+0x7de/0xc00 [ 1414.960119] relay_open+0x531/0xa10 [ 1414.960613] do_blk_trace_setup+0x4cf/0xc10 [ 1414.961205] ? _copy_from_user+0xfb/0x1b0 [ 1414.961764] __blk_trace_setup+0xca/0x180 [ 1414.962328] ? do_blk_trace_setup+0xc10/0xc10 [ 1414.962950] blk_trace_ioctl+0x155/0x290 [ 1414.963499] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1414.964143] ? do_vfs_ioctl+0x283/0x10d0 [ 1414.964685] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1414.965387] ? generic_block_fiemap+0x60/0x60 [ 1414.965988] ? lock_downgrade+0x6d0/0x6d0 [ 1414.966545] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1414.967197] blkdev_ioctl+0xc1/0x710 [ 1414.967697] ? blkdev_common_ioctl+0x1930/0x1930 [ 1414.968326] ? selinux_file_ioctl+0xb6/0x270 [ 1414.968920] block_ioctl+0xf9/0x140 [ 1414.969400] ? blkdev_read_iter+0x1c0/0x1c0 [ 1414.969981] __x64_sys_ioctl+0x19a/0x210 [ 1414.970532] do_syscall_64+0x33/0x40 [ 1414.971039] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1414.971728] RIP: 0033:0x7f805ff83b19 09:10:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1414.972232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1414.974940] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1414.975968] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1414.976934] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1414.977898] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1414.978842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1414.979827] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1414.981816] debugfs: out of free dentries, can not create file 'trace0' 09:10:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000200000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1414.997429] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1414.998734] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1415.004366] kauditd_printk_skb: 19 callbacks suppressed [ 1415.004376] audit: type=1326 audit(1749460238.795:1912): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9102 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1415.008071] audit: type=1326 audit(1749460238.799:1913): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9102 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1415.014515] audit: type=1326 audit(1749460238.805:1914): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9102 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:10:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:10:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000300000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1415.020491] audit: type=1326 audit(1749460238.805:1915): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9102 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:10:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 19) 09:10:38 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xa40f}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1415.062792] audit: type=1326 audit(1749460238.831:1916): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9102 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1415.082033] audit: type=1326 audit(1749460238.831:1917): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9102 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1415.083807] FAULT_INJECTION: forcing a failure. [ 1415.083807] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.086025] CPU: 0 PID: 9126 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1415.086753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1415.087722] Call Trace: [ 1415.088016] dump_stack+0x107/0x167 [ 1415.088409] should_fail.cold+0x5/0xa [ 1415.088820] ? __alloc_file+0x21/0x320 [ 1415.089010] audit: type=1326 audit(1749460238.832:1918): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9102 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1415.089243] should_failslab+0x5/0x20 [ 1415.092226] kmem_cache_alloc+0x5b/0x310 [ 1415.092691] __alloc_file+0x21/0x320 [ 1415.093099] alloc_empty_file+0x6d/0x170 [ 1415.093537] path_openat+0xe6/0x2770 [ 1415.093656] audit: type=1326 audit(1749460238.832:1919): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9102 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1415.093964] ? __lock_acquire+0x1657/0x5b00 [ 1415.093982] ? path_lookupat+0x860/0x860 [ 1415.096658] audit: type=1326 audit(1749460238.832:1920): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9102 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1415.097008] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1415.097018] ? SOFTIRQ_verbose+0x10/0x10 [ 1415.097028] ? find_held_lock+0x2c/0x110 [ 1415.097045] do_filp_open+0x190/0x3e0 [ 1415.097747] audit: type=1326 audit(1749460238.833:1921): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9102 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1415.099783] ? may_open_dev+0xf0/0xf0 [ 1415.099797] ? alloc_fd+0x2e7/0x670 [ 1415.099808] ? lock_downgrade+0x6d0/0x6d0 [ 1415.099820] ? do_raw_spin_lock+0x121/0x260 [ 1415.105663] ? rwlock_bug.part.0+0x90/0x90 [ 1415.106159] ? _raw_spin_unlock+0x1a/0x30 [ 1415.106628] ? alloc_fd+0x2e7/0x670 [ 1415.107028] do_sys_openat2+0x171/0x4d0 [ 1415.107463] ? build_open_flags+0x6f0/0x6f0 [ 1415.107932] ? rcu_read_lock_any_held+0x75/0xa0 [ 1415.108432] __x64_sys_openat+0x13f/0x1f0 [ 1415.108876] ? __ia32_sys_open+0x1c0/0x1c0 [ 1415.109367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1415.109935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1415.110489] do_syscall_64+0x33/0x40 [ 1415.110889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1415.111449] RIP: 0033:0x7ffb82501a04 [ 1415.111879] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1415.113847] RSP: 002b:00007ffb7fac3ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1415.114725] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb82501a04 [ 1415.115500] RDX: 0000000000000002 RSI: 00007ffb7fac4000 RDI: 00000000ffffff9c [ 1415.116322] RBP: 00007ffb7fac4000 R08: 0000000000000000 R09: ffffffffffffffff [ 1415.117094] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1415.117859] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1415.122678] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1415.123768] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:10:38 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 43) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1415.154649] FAULT_INJECTION: forcing a failure. [ 1415.154649] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.156165] CPU: 1 PID: 9133 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1415.156991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1415.157990] Call Trace: [ 1415.158318] dump_stack+0x107/0x167 [ 1415.158765] should_fail.cold+0x5/0xa [ 1415.159231] ? create_object.isra.0+0x3a/0xa20 [ 1415.159795] should_failslab+0x5/0x20 [ 1415.160258] kmem_cache_alloc+0x5b/0x310 [ 1415.160756] create_object.isra.0+0x3a/0xa20 [ 1415.161289] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1415.161906] kmem_cache_alloc+0x159/0x310 [ 1415.162422] alloc_inode+0x171/0x240 [ 1415.162874] new_inode+0x23/0x250 [ 1415.163302] debugfs_get_inode+0x1a/0x130 [ 1415.163814] __debugfs_create_file+0x14e/0x580 [ 1415.164377] ? blk_trace_remove+0x40/0x40 [ 1415.164882] relay_create_buf_file+0xf6/0x180 [ 1415.165429] relay_open_buf.part.0+0x7de/0xc00 [ 1415.165992] relay_open+0x531/0xa10 [ 1415.166441] do_blk_trace_setup+0x4cf/0xc10 [ 1415.166969] ? _copy_from_user+0xfb/0x1b0 [ 1415.167480] __blk_trace_setup+0xca/0x180 [ 1415.167980] ? do_blk_trace_setup+0xc10/0xc10 [ 1415.168539] blk_trace_ioctl+0x155/0x290 [ 1415.169040] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1415.169637] ? do_vfs_ioctl+0x283/0x10d0 [ 1415.170129] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1415.170762] ? generic_block_fiemap+0x60/0x60 [ 1415.171304] ? lock_downgrade+0x6d0/0x6d0 [ 1415.171819] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1415.172408] blkdev_ioctl+0xc1/0x710 [ 1415.172861] ? blkdev_common_ioctl+0x1930/0x1930 [ 1415.173437] ? selinux_file_ioctl+0xb6/0x270 [ 1415.173972] block_ioctl+0xf9/0x140 [ 1415.174420] ? blkdev_read_iter+0x1c0/0x1c0 [ 1415.174941] __x64_sys_ioctl+0x19a/0x210 [ 1415.175446] do_syscall_64+0x33/0x40 [ 1415.175895] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1415.176516] RIP: 0033:0x7f805ff83b19 [ 1415.176965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1415.179192] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1415.180120] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1415.180977] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1415.181837] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1415.182698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1415.183566] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 09:10:51 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 44) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:10:51 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1428.072001] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1428.073232] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:10:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 20) 09:10:51 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x80000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:10:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x4000000}) 09:10:51 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000900000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:10:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:10:51 executing program 3: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x6112}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1428.103566] FAULT_INJECTION: forcing a failure. [ 1428.103566] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.105283] CPU: 0 PID: 9149 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1428.106240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.107233] Call Trace: [ 1428.107567] dump_stack+0x107/0x167 [ 1428.108020] should_fail.cold+0x5/0xa [ 1428.108486] ? create_object.isra.0+0x3a/0xa20 [ 1428.109039] should_failslab+0x5/0x20 [ 1428.109498] kmem_cache_alloc+0x5b/0x310 [ 1428.109990] create_object.isra.0+0x3a/0xa20 [ 1428.110515] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1428.111130] kmem_cache_alloc+0x159/0x310 [ 1428.111662] alloc_inode+0x171/0x240 [ 1428.112111] new_inode+0x23/0x250 [ 1428.112535] debugfs_get_inode+0x1a/0x130 [ 1428.113036] __debugfs_create_file+0x14e/0x580 [ 1428.113593] ? blk_trace_remove+0x40/0x40 [ 1428.114096] relay_create_buf_file+0xf6/0x180 [ 1428.114640] relay_open_buf.part.0+0x7de/0xc00 [ 1428.115206] relay_open+0x531/0xa10 [ 1428.115658] do_blk_trace_setup+0x4cf/0xc10 [ 1428.116180] ? _copy_from_user+0xfb/0x1b0 [ 1428.116678] __blk_trace_setup+0xca/0x180 [ 1428.117172] ? do_blk_trace_setup+0xc10/0xc10 [ 1428.117724] blk_trace_ioctl+0x155/0x290 [ 1428.118209] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1428.118791] ? do_vfs_ioctl+0x283/0x10d0 [ 1428.119277] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1428.119909] ? generic_block_fiemap+0x60/0x60 [ 1428.120444] ? lock_downgrade+0x6d0/0x6d0 [ 1428.120945] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1428.121522] blkdev_ioctl+0xc1/0x710 [ 1428.121966] ? blkdev_common_ioctl+0x1930/0x1930 [ 1428.122532] ? selinux_file_ioctl+0xb6/0x270 [ 1428.123064] block_ioctl+0xf9/0x140 [ 1428.123504] ? blkdev_read_iter+0x1c0/0x1c0 [ 1428.124022] __x64_sys_ioctl+0x19a/0x210 [ 1428.124508] do_syscall_64+0x33/0x40 [ 1428.124958] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1428.125567] RIP: 0033:0x7f805ff83b19 [ 1428.126011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1428.128196] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1428.129102] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1428.129948] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1428.130806] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1428.131698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1428.132551] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 09:10:51 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000d00000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1428.159119] FAULT_INJECTION: forcing a failure. [ 1428.159119] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.160602] CPU: 0 PID: 9155 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1428.161417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.162441] Call Trace: [ 1428.162774] dump_stack+0x107/0x167 [ 1428.163229] should_fail.cold+0x5/0xa [ 1428.163716] ? create_object.isra.0+0x3a/0xa20 [ 1428.164294] should_failslab+0x5/0x20 [ 1428.164776] kmem_cache_alloc+0x5b/0x310 [ 1428.165282] create_object.isra.0+0x3a/0xa20 [ 1428.165835] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1428.166468] kmem_cache_alloc+0x159/0x310 [ 1428.166998] __alloc_file+0x21/0x320 [ 1428.167519] alloc_empty_file+0x6d/0x170 [ 1428.168042] path_openat+0xe6/0x2770 [ 1428.168540] ? __lock_acquire+0x1657/0x5b00 [ 1428.169099] ? path_lookupat+0x860/0x860 [ 1428.169646] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1428.170356] ? SOFTIRQ_verbose+0x10/0x10 [ 1428.170870] ? find_held_lock+0x2c/0x110 [ 1428.171394] do_filp_open+0x190/0x3e0 [ 1428.171910] ? may_open_dev+0xf0/0xf0 [ 1428.172397] ? alloc_fd+0x2e7/0x670 [ 1428.172854] ? lock_downgrade+0x6d0/0x6d0 [ 1428.173384] ? do_raw_spin_lock+0x121/0x260 [ 1428.173939] ? rwlock_bug.part.0+0x90/0x90 [ 1428.174470] ? _raw_spin_unlock+0x1a/0x30 [ 1428.174991] ? alloc_fd+0x2e7/0x670 [ 1428.175464] do_sys_openat2+0x171/0x4d0 [ 1428.175974] ? build_open_flags+0x6f0/0x6f0 [ 1428.176508] ? rcu_read_lock_any_held+0x75/0xa0 [ 1428.177080] __x64_sys_openat+0x13f/0x1f0 [ 1428.177589] ? __ia32_sys_open+0x1c0/0x1c0 [ 1428.178113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1428.178756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.179394] do_syscall_64+0x33/0x40 [ 1428.179885] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1428.180513] RIP: 0033:0x7ffb82501a04 [ 1428.180971] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1428.183239] RSP: 002b:00007ffb7fac3ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1428.184214] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb82501a04 [ 1428.185094] RDX: 0000000000000002 RSI: 00007ffb7fac4000 RDI: 00000000ffffff9c [ 1428.185975] RBP: 00007ffb7fac4000 R08: 0000000000000000 R09: ffffffffffffffff [ 1428.186847] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1428.187732] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1428.212302] kauditd_printk_skb: 5 callbacks suppressed [ 1428.212326] audit: type=1326 audit(1749460252.003:1927): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9146 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1428.223368] audit: type=1326 audit(1749460252.014:1928): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9146 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1428.236463] loop0: detected capacity change from 0 to 2048 [ 1428.248827] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1428.251930] audit: type=1326 audit(1749460252.024:1929): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9146 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1428.254791] audit: type=1326 audit(1749460252.038:1930): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9146 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:10:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x8000000}) 09:10:52 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 45) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1428.267058] audit: type=1326 audit(1749460252.055:1931): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9146 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:10:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 21) [ 1428.286315] audit: type=1326 audit(1749460252.064:1932): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9146 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1428.291985] audit: type=1326 audit(1749460252.075:1933): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9146 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:10:52 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x200000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1428.297765] audit: type=1326 audit(1749460252.075:1934): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9146 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1428.303507] audit: type=1326 audit(1749460252.075:1935): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9146 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1428.309729] audit: type=1326 audit(1749460252.076:1936): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9146 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1428.348206] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1428.349389] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1428.378555] FAULT_INJECTION: forcing a failure. [ 1428.378555] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.381229] CPU: 1 PID: 9166 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1428.382683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.384476] Call Trace: [ 1428.385048] dump_stack+0x107/0x167 [ 1428.385844] should_fail.cold+0x5/0xa [ 1428.386671] ? create_object.isra.0+0x3a/0xa20 [ 1428.387672] should_failslab+0x5/0x20 [ 1428.388492] kmem_cache_alloc+0x5b/0x310 [ 1428.389378] create_object.isra.0+0x3a/0xa20 [ 1428.390322] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1428.391423] kmem_cache_alloc+0x159/0x310 [ 1428.392332] security_inode_alloc+0x34/0x160 [ 1428.393277] inode_init_always+0xa4e/0xd10 [ 1428.394186] alloc_inode+0x84/0x240 [ 1428.394969] new_inode+0x23/0x250 [ 1428.395728] debugfs_get_inode+0x1a/0x130 [ 1428.396622] __debugfs_create_file+0x14e/0x580 [ 1428.397606] ? blk_trace_remove+0x40/0x40 [ 1428.398495] relay_create_buf_file+0xf6/0x180 [ 1428.399464] relay_open_buf.part.0+0x7de/0xc00 [ 1428.400468] relay_open+0x531/0xa10 [ 1428.401258] do_blk_trace_setup+0x4cf/0xc10 [ 1428.402172] ? _copy_from_user+0xfb/0x1b0 [ 1428.403040] __blk_trace_setup+0xca/0x180 [ 1428.403931] ? do_blk_trace_setup+0xc10/0xc10 [ 1428.404890] blk_trace_ioctl+0x155/0x290 [ 1428.405740] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1428.406765] ? do_vfs_ioctl+0x283/0x10d0 [ 1428.407630] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1428.408720] ? generic_block_fiemap+0x60/0x60 [ 1428.409655] ? lock_downgrade+0x6d0/0x6d0 [ 1428.410525] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1428.411545] blkdev_ioctl+0xc1/0x710 [ 1428.412325] ? blkdev_common_ioctl+0x1930/0x1930 [ 1428.413321] ? selinux_file_ioctl+0xb6/0x270 [ 1428.414249] block_ioctl+0xf9/0x140 [ 1428.415008] ? blkdev_read_iter+0x1c0/0x1c0 [ 1428.415920] __x64_sys_ioctl+0x19a/0x210 [ 1428.416778] do_syscall_64+0x33/0x40 [ 1428.417560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1428.418632] RIP: 0033:0x7f805ff83b19 [ 1428.419417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1428.423288] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1428.424899] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1428.426398] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1428.427907] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1428.429410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1428.430905] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1428.437372] FAULT_INJECTION: forcing a failure. [ 1428.437372] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.438742] CPU: 0 PID: 9173 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1428.439484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.440373] Call Trace: [ 1428.440665] dump_stack+0x107/0x167 [ 1428.441062] should_fail.cold+0x5/0xa [ 1428.441474] ? security_file_alloc+0x34/0x170 [ 1428.441959] should_failslab+0x5/0x20 [ 1428.442372] kmem_cache_alloc+0x5b/0x310 [ 1428.442811] security_file_alloc+0x34/0x170 [ 1428.443275] __alloc_file+0xb7/0x320 [ 1428.443681] alloc_empty_file+0x6d/0x170 [ 1428.444119] path_openat+0xe6/0x2770 [ 1428.444523] ? __lock_acquire+0x1657/0x5b00 [ 1428.444993] ? path_lookupat+0x860/0x860 [ 1428.445430] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1428.445990] ? SOFTIRQ_verbose+0x10/0x10 [ 1428.446424] ? find_held_lock+0x2c/0x110 [ 1428.446866] do_filp_open+0x190/0x3e0 [ 1428.447275] ? may_open_dev+0xf0/0xf0 [ 1428.447692] ? alloc_fd+0x2e7/0x670 [ 1428.448082] ? lock_downgrade+0x6d0/0x6d0 [ 1428.448524] ? do_raw_spin_lock+0x121/0x260 [ 1428.448987] ? rwlock_bug.part.0+0x90/0x90 [ 1428.449447] ? _raw_spin_unlock+0x1a/0x30 [ 1428.449890] ? alloc_fd+0x2e7/0x670 [ 1428.450292] do_sys_openat2+0x171/0x4d0 [ 1428.450719] ? build_open_flags+0x6f0/0x6f0 [ 1428.451188] ? rcu_read_lock_any_held+0x75/0xa0 [ 1428.451701] __x64_sys_openat+0x13f/0x1f0 [ 1428.452146] ? __ia32_sys_open+0x1c0/0x1c0 [ 1428.452612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1428.453174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.453729] do_syscall_64+0x33/0x40 [ 1428.454129] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1428.454678] RIP: 0033:0x7ffb82501a04 [ 1428.455078] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1428.457049] RSP: 002b:00007ffb7fac3ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1428.457865] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb82501a04 [ 1428.458628] RDX: 0000000000000002 RSI: 00007ffb7fac4000 RDI: 00000000ffffff9c [ 1428.459391] RBP: 00007ffb7fac4000 R08: 0000000000000000 R09: ffffffffffffffff [ 1428.460159] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1428.460921] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1440.123971] FAULT_INJECTION: forcing a failure. [ 1440.123971] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.127356] CPU: 0 PID: 9181 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1440.129111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1440.131204] Call Trace: [ 1440.131876] dump_stack+0x107/0x167 [ 1440.132804] should_fail.cold+0x5/0xa [ 1440.133755] ? create_object.isra.0+0x3a/0xa20 [ 1440.134921] should_failslab+0x5/0x20 [ 1440.135229] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1440.135876] kmem_cache_alloc+0x5b/0x310 [ 1440.135902] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1440.135931] create_object.isra.0+0x3a/0xa20 [ 1440.137014] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1440.137978] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1440.138011] kmem_cache_alloc+0x159/0x310 [ 1440.144311] security_file_alloc+0x34/0x170 [ 1440.145392] __alloc_file+0xb7/0x320 [ 1440.146321] alloc_empty_file+0x6d/0x170 [ 1440.147335] path_openat+0xe6/0x2770 [ 1440.148273] ? __lock_acquire+0x1657/0x5b00 [ 1440.149361] ? path_lookupat+0x860/0x860 [ 1440.150376] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1440.151686] ? SOFTIRQ_verbose+0x10/0x10 [ 1440.152698] ? find_held_lock+0x2c/0x110 [ 1440.153728] do_filp_open+0x190/0x3e0 [ 1440.154678] ? may_open_dev+0xf0/0xf0 [ 1440.155643] ? alloc_fd+0x2e7/0x670 [ 1440.156578] ? lock_downgrade+0x6d0/0x6d0 [ 1440.157614] ? do_raw_spin_lock+0x121/0x260 [ 1440.158718] ? rwlock_bug.part.0+0x90/0x90 [ 1440.159799] ? _raw_spin_unlock+0x1a/0x30 [ 1440.160877] ? alloc_fd+0x2e7/0x670 [ 1440.161804] do_sys_openat2+0x171/0x4d0 [ 1440.162820] ? build_open_flags+0x6f0/0x6f0 [ 1440.163918] ? rcu_read_lock_any_held+0x75/0xa0 [ 1440.165106] __x64_sys_openat+0x13f/0x1f0 [ 1440.166140] ? __ia32_sys_open+0x1c0/0x1c0 [ 1440.167226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1440.168548] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1440.169864] do_syscall_64+0x33/0x40 [ 1440.170794] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1440.170948] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1440.172108] RIP: 0033:0x7ffb82501a04 [ 1440.172131] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1440.172148] RSP: 002b:00007ffb7fac3ed0 EFLAGS: 00000293 [ 1440.173294] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1440.174190] ORIG_RAX: 0000000000000101 [ 1440.174205] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb82501a04 [ 1440.174222] RDX: 0000000000000002 RSI: 00007ffb7fac4000 RDI: 00000000ffffff9c [ 1440.184108] loop3: detected capacity change from 0 to 135266304 [ 1440.184601] RBP: 00007ffb7fac4000 R08: 0000000000000000 R09: ffffffffffffffff [ 1440.184616] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1440.188496] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 09:11:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 22) 09:11:03 executing program 3: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000001c0)) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000001340)='.log\x00', 0x420281, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001540)={'ip6gre0\x00', &(0x7f00000013c0)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x9, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x11, 0x85c, 0x7}}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001640)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffff80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x8) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000040)={[{@dmode}], [{@pcr}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2, 0x2, &(0x7f0000000180)=[{&(0x7f0000000240)="af5356a878b8aaec3d3a64443754c9be9cca49d21450109a902d1885344b5c64dfd88c1cdea982c2b1fb1689af84820415ca86e7d7e7a3418d3d35724b294aa822ea795801134ef24582d733c97ea5f79f1f4f1e48b0584152962082a0383844d92f586d0a5c0f2a339767a911660b383c32040b6ce8b720ffa40ef65d63fae5f7d09ca17dd1ee71ffcd00ff613b2d3e50bf51d71b34e8f34faee20b218a4759c756d2e7a6ccd005789fce2c4096c2a57dc890046ef56990c6856d82c1eb7c9a057fb1089175ab419e012ec3c31b222870f0ab8297d954ebf75e", 0xda, 0x3ff}, {&(0x7f0000000340)="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", 0x1000, 0x9}], 0x1810000, &(0x7f0000001440)=ANY=[@ANYBLOB="402cce5d5d97252c646566636f6e746578742c6f626a5f747970653d5d2c6f626a5f757365723d7d2c736d61636b66737472616e736d7574653d66756e632c7569643d8525e7455f584ef288773e20d2552ef33ffa47e95f1390f7a3673ae2b38423410891c5432154428e2f45f81fb90eb23ae9cc8b2e6ed3293b224758c9753ecf0f89aa37961d88479ec829be10eee240ab5da7a71cf10f86b3bf670b25a5e08d15ec6482ea48d829c3d21645cc5c6d25753dce20c7658784ff92c58658fbde763f7fb8c6a9e486bb439a03e9", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) 09:11:03 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 46) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:11:03 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:11:03 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xe0ff7f}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:11:03 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000e00000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:11:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x9000000}) 09:11:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:11:03 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000003000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1440.219177] loop0: detected capacity change from 0 to 2048 09:11:04 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000009000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1440.255706] FAULT_INJECTION: forcing a failure. [ 1440.255706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1440.257192] CPU: 1 PID: 9197 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1440.257968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1440.258910] Call Trace: [ 1440.259216] dump_stack+0x107/0x167 [ 1440.259644] should_fail.cold+0x5/0xa [ 1440.260083] __alloc_pages_nodemask+0x182/0x600 [ 1440.260613] ? lock_acquire+0x197/0x470 [ 1440.261066] ? lockref_get+0x11/0x50 [ 1440.261493] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1440.262186] ? lock_downgrade+0x6d0/0x6d0 [ 1440.262652] ? do_raw_spin_lock+0x121/0x260 [ 1440.263144] ? rwlock_bug.part.0+0x90/0x90 [ 1440.263637] alloc_pages_current+0x187/0x280 [ 1440.264145] __get_free_pages+0xc/0xa0 [ 1440.264587] inode_doinit_with_dentry+0x8f1/0x1240 [ 1440.265150] ? __mod_timer+0xc87/0xd10 [ 1440.265591] ? call_timer_fn+0x110/0x4a0 [ 1440.266056] ? selinux_file_lock+0x280/0x280 [ 1440.266556] ? current_time+0x1e6/0x2c0 [ 1440.267005] ? igrab+0xc0/0xc0 [ 1440.267376] selinux_d_instantiate+0x23/0x30 [ 1440.267889] security_d_instantiate+0x56/0xe0 [ 1440.268405] d_instantiate+0x5a/0x90 [ 1440.268825] __debugfs_create_file+0x246/0x580 [ 1440.269348] ? blk_trace_remove+0x40/0x40 [ 1440.269818] relay_create_buf_file+0xf6/0x180 [ 1440.270330] relay_open_buf.part.0+0x7de/0xc00 [ 1440.270860] relay_open+0x531/0xa10 [ 1440.271276] do_blk_trace_setup+0x4cf/0xc10 [ 1440.271775] ? _copy_from_user+0xfb/0x1b0 [ 1440.272243] __blk_trace_setup+0xca/0x180 [ 1440.272717] ? do_blk_trace_setup+0xc10/0xc10 [ 1440.273239] blk_trace_ioctl+0x155/0x290 [ 1440.273702] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1440.274257] ? do_vfs_ioctl+0x283/0x10d0 [ 1440.274718] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1440.275315] ? generic_block_fiemap+0x60/0x60 [ 1440.275828] ? lock_downgrade+0x6d0/0x6d0 [ 1440.276300] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1440.276848] blkdev_ioctl+0xc1/0x710 [ 1440.277272] ? blkdev_common_ioctl+0x1930/0x1930 [ 1440.277809] ? selinux_file_ioctl+0xb6/0x270 [ 1440.278315] block_ioctl+0xf9/0x140 [ 1440.278725] ? blkdev_read_iter+0x1c0/0x1c0 [ 1440.279217] __x64_sys_ioctl+0x19a/0x210 [ 1440.279687] do_syscall_64+0x33/0x40 [ 1440.280113] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1440.280688] RIP: 0033:0x7f805ff83b19 [ 1440.281111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1440.283169] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.284038] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1440.284846] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1440.285657] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1440.286469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1440.287277] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1440.288462] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1440.291164] loop3: detected capacity change from 0 to 4096 [ 1440.292221] nfs4: Unknown parameter '@' 09:11:04 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xe0ffff}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1440.302097] kauditd_printk_skb: 4 callbacks suppressed [ 1440.302116] audit: type=1326 audit(1749460264.089:1941): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9186 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1440.340234] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1440.341397] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1440.360109] audit: type=1326 audit(1749460264.090:1942): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9186 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1440.362670] audit: type=1326 audit(1749460264.090:1943): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9186 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:11:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xd000000}) 09:11:04 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 47) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:11:04 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1440.398098] audit: type=1326 audit(1749460264.091:1944): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9186 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:11:04 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000d000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1440.403741] loop3: detected capacity change from 0 to 135266304 [ 1440.408137] audit: type=1326 audit(1749460264.091:1945): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9186 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:11:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1440.465035] audit: type=1326 audit(1749460264.091:1946): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9186 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1440.488305] FAULT_INJECTION: forcing a failure. [ 1440.488305] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1440.490088] CPU: 1 PID: 9222 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1440.490866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1440.491839] Call Trace: [ 1440.492152] dump_stack+0x107/0x167 [ 1440.492581] should_fail.cold+0x5/0xa [ 1440.493027] __alloc_pages_nodemask+0x182/0x600 [ 1440.493565] ? lock_acquire+0x197/0x470 [ 1440.494030] ? lockref_get+0x11/0x50 [ 1440.494466] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1440.495171] ? lock_downgrade+0x6d0/0x6d0 [ 1440.495649] ? do_raw_spin_lock+0x121/0x260 [ 1440.496147] ? rwlock_bug.part.0+0x90/0x90 [ 1440.496636] alloc_pages_current+0x187/0x280 [ 1440.497152] __get_free_pages+0xc/0xa0 [ 1440.497598] inode_doinit_with_dentry+0x8f1/0x1240 [ 1440.498175] ? __mod_timer+0xc87/0xd10 [ 1440.498619] ? call_timer_fn+0x110/0x4a0 [ 1440.499096] ? selinux_file_lock+0x280/0x280 [ 1440.499603] ? current_time+0x1e6/0x2c0 [ 1440.500066] ? igrab+0xc0/0xc0 [ 1440.500442] selinux_d_instantiate+0x23/0x30 [ 1440.500960] security_d_instantiate+0x56/0xe0 [ 1440.501474] d_instantiate+0x5a/0x90 [ 1440.501907] __debugfs_create_file+0x246/0x580 [ 1440.502436] ? blk_trace_remove+0x40/0x40 [ 1440.502918] relay_create_buf_file+0xf6/0x180 [ 1440.503431] relay_open_buf.part.0+0x7de/0xc00 [ 1440.503977] relay_open+0x531/0xa10 [ 1440.504150] audit: type=1326 audit(1749460264.091:1947): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9186 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1440.504402] do_blk_trace_setup+0x4cf/0xc10 [ 1440.509681] ? _copy_from_user+0xfb/0x1b0 [ 1440.510169] __blk_trace_setup+0xca/0x180 [ 1440.510646] ? do_blk_trace_setup+0xc10/0xc10 [ 1440.511180] blk_trace_ioctl+0x155/0x290 [ 1440.511659] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1440.512220] ? do_vfs_ioctl+0x283/0x10d0 [ 1440.512687] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1440.513293] ? generic_block_fiemap+0x60/0x60 [ 1440.513812] ? lock_downgrade+0x6d0/0x6d0 [ 1440.514297] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1440.514861] blkdev_ioctl+0xc1/0x710 [ 1440.515293] ? blkdev_common_ioctl+0x1930/0x1930 [ 1440.515853] ? selinux_file_ioctl+0xb6/0x270 [ 1440.516371] block_ioctl+0xf9/0x140 [ 1440.516794] ? blkdev_read_iter+0x1c0/0x1c0 [ 1440.517294] __x64_sys_ioctl+0x19a/0x210 [ 1440.517767] do_syscall_64+0x33/0x40 [ 1440.518200] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1440.518786] RIP: 0033:0x7f805ff83b19 [ 1440.519220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1440.521338] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.522227] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1440.523047] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1440.523872] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1440.524696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1440.525514] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1440.535001] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1440.537313] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1440.545637] audit: type=1326 audit(1749460264.091:1948): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9186 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1440.578053] audit: type=1326 audit(1749460264.091:1949): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9186 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1440.619530] audit: type=1326 audit(1749460264.094:1950): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9186 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1454.797983] FAULT_INJECTION: forcing a failure. [ 1454.797983] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.800575] CPU: 1 PID: 9235 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1454.801728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1454.803127] Call Trace: [ 1454.803577] dump_stack+0x107/0x167 [ 1454.804202] should_fail.cold+0x5/0xa [ 1454.804857] ? __kthread_create_on_node+0xd1/0x400 [ 1454.805693] should_failslab+0x5/0x20 [ 1454.806346] kmem_cache_alloc_trace+0x55/0x320 [ 1454.807130] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1454.807943] __kthread_create_on_node+0xd1/0x400 [ 1454.808750] ? __kthread_parkme+0x1d0/0x1d0 [ 1454.809494] ? __mutex_lock+0x4fe/0x10b0 [ 1454.810199] ? loop_configure+0xc8a/0x1410 [ 1454.810925] ? do_raw_spin_unlock+0x4f/0x220 [ 1454.811669] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1454.812621] kthread_create_on_node+0xbb/0x100 09:11:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 23) 09:11:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r3, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_setup(0xb3d, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff7f0000000001002e2f66696c653000"]) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6, r5, &(0x7f00000001c0)="a3d1ce70ec52f13ffb", 0x9, 0xb, 0x0, 0x1, r2}]) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x20100, 0x102) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x2011, 0xffffffffffffffff, 0x0) r6 = syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000300)=ANY=[]) mkdirat(r6, 0x0, 0x2) getsockname$netlink(r1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) 09:11:18 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xf0ff7f}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:11:18 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, 0x0, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:11:18 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 48) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:11:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xe000000}) 09:11:18 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000e000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:11:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1454.813754] ? __kthread_create_on_node+0x400/0x400 [ 1454.814724] ? lockdep_init_map_type+0x2c7/0x780 [ 1454.815538] ? lockdep_init_map_type+0x2c7/0x780 [ 1454.816371] loop_configure+0x3e7/0x1410 [ 1454.817081] lo_ioctl+0xa57/0x16b0 [ 1454.817677] ? avc_has_extended_perms+0x7f1/0xf40 [ 1454.818500] ? loop_set_status_old+0x250/0x250 [ 1454.819273] ? avc_ss_reset+0x180/0x180 [ 1454.819962] ? find_held_lock+0x2c/0x110 [ 1454.820677] ? __lock_acquire+0xbb1/0x5b00 [ 1454.821442] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1454.822343] ? generic_block_fiemap+0x60/0x60 [ 1454.823103] ? lock_downgrade+0x6d0/0x6d0 [ 1454.823821] ? build_open_flags+0x6f0/0x6f0 [ 1454.824562] ? loop_set_status_old+0x250/0x250 [ 1454.825344] blkdev_ioctl+0x291/0x710 [ 1454.825998] ? blkdev_common_ioctl+0x1930/0x1930 [ 1454.826813] ? selinux_file_ioctl+0xb6/0x270 [ 1454.827571] block_ioctl+0xf9/0x140 [ 1454.828198] ? blkdev_read_iter+0x1c0/0x1c0 [ 1454.828933] __x64_sys_ioctl+0x19a/0x210 [ 1454.829628] do_syscall_64+0x33/0x40 [ 1454.830255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1454.831118] RIP: 0033:0x7ffb8254e8d7 [ 1454.831762] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1454.834903] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.836211] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1454.837434] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1454.838650] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1454.839884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1454.841103] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1454.880732] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1454.881825] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1454.892087] kauditd_printk_skb: 17 callbacks suppressed [ 1454.892097] audit: type=1326 audit(1749460278.682:1968): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9238 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1454.895391] audit: type=1326 audit(1749460278.683:1969): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9238 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1454.895492] FAULT_INJECTION: forcing a failure. [ 1454.895492] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.900258] CPU: 1 PID: 9248 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1454.901429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1454.902831] Call Trace: [ 1454.903285] dump_stack+0x107/0x167 [ 1454.903925] should_fail.cold+0x5/0xa [ 1454.904582] ? create_object.isra.0+0x3a/0xa20 [ 1454.905360] should_failslab+0x5/0x20 [ 1454.906019] kmem_cache_alloc+0x5b/0x310 [ 1454.906716] ? lockdep_init_map_type+0x2c7/0x780 [ 1454.907531] create_object.isra.0+0x3a/0xa20 [ 1454.908289] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1454.909160] kmem_cache_alloc_trace+0x151/0x320 [ 1454.909945] relay_open_buf.part.0+0x91/0xc00 [ 1454.910712] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1454.911596] relay_open+0x531/0xa10 [ 1454.912236] do_blk_trace_setup+0x4cf/0xc10 [ 1454.912976] ? _copy_from_user+0xfb/0x1b0 [ 1454.913694] __blk_trace_setup+0xca/0x180 [ 1454.914394] ? do_blk_trace_setup+0xc10/0xc10 [ 1454.915190] blk_trace_ioctl+0x155/0x290 [ 1454.915883] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1454.916717] ? __sanitizer_cov_trace_switch+0xe/0x80 [ 1454.917575] blkdev_ioctl+0xc1/0x710 [ 1454.918203] ? blkdev_common_ioctl+0x1930/0x1930 [ 1454.919014] block_ioctl+0xf9/0x140 [ 1454.919635] ? blkdev_read_iter+0x1c0/0x1c0 [ 1454.920376] __x64_sys_ioctl+0x19a/0x210 [ 1454.921059] do_syscall_64+0x33/0x40 [ 1454.921699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1454.922565] RIP: 0033:0x7f805ff83b19 [ 1454.923189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1454.926288] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.927576] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1454.928795] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1454.930007] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1454.931213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1454.932433] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 09:11:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 24) [ 1454.943832] audit: type=1326 audit(1749460278.733:1970): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9238 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1454.946220] audit: type=1326 audit(1749460278.733:1971): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9238 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1454.949436] audit: type=1326 audit(1749460278.734:1972): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9238 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1454.953334] FAULT_INJECTION: forcing a failure. [ 1454.953334] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.954622] CPU: 0 PID: 9256 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1454.955414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1454.956318] Call Trace: [ 1454.956623] dump_stack+0x107/0x167 [ 1454.957023] should_fail.cold+0x5/0xa [ 1454.957465] ? create_object.isra.0+0x3a/0xa20 [ 1454.957962] should_failslab+0x5/0x20 [ 1454.958396] kmem_cache_alloc+0x5b/0x310 [ 1454.958859] create_object.isra.0+0x3a/0xa20 [ 1454.959362] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1454.959960] kmem_cache_alloc_trace+0x151/0x320 [ 1454.960469] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1454.961015] __kthread_create_on_node+0xd1/0x400 [ 1454.961556] ? __kthread_parkme+0x1d0/0x1d0 [ 1454.962075] ? __mutex_lock+0x4fe/0x10b0 [ 1454.962532] ? loop_configure+0xc8a/0x1410 [ 1454.963016] ? do_raw_spin_unlock+0x4f/0x220 [ 1454.963493] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1454.964037] kthread_create_on_node+0xbb/0x100 [ 1454.964558] ? __kthread_create_on_node+0x400/0x400 [ 1454.965137] ? lockdep_init_map_type+0x2c7/0x780 [ 1454.965655] ? lockdep_init_map_type+0x2c7/0x780 [ 1454.966203] loop_configure+0x3e7/0x1410 [ 1454.966675] lo_ioctl+0xa57/0x16b0 [ 1454.967084] ? avc_has_extended_perms+0x7f1/0xf40 [ 1454.967609] ? loop_set_status_old+0x250/0x250 [ 1454.968143] ? avc_ss_reset+0x180/0x180 [ 1454.968581] ? find_held_lock+0x2c/0x110 [ 1454.969056] ? __lock_acquire+0xbb1/0x5b00 [ 1454.969540] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1454.970146] ? generic_block_fiemap+0x60/0x60 [ 1454.970629] ? lock_downgrade+0x6d0/0x6d0 [ 1454.971107] ? build_open_flags+0x6f0/0x6f0 [ 1454.971580] ? loop_set_status_old+0x250/0x250 [ 1454.972117] blkdev_ioctl+0x291/0x710 [ 1454.972527] ? blkdev_common_ioctl+0x1930/0x1930 [ 1454.973078] ? selinux_file_ioctl+0xb6/0x270 [ 1454.973556] block_ioctl+0xf9/0x140 [ 1454.973981] ? blkdev_read_iter+0x1c0/0x1c0 [ 1454.974454] __x64_sys_ioctl+0x19a/0x210 [ 1454.974923] do_syscall_64+0x33/0x40 [ 1454.975326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1454.975928] RIP: 0033:0x7ffb8254e8d7 [ 1454.976331] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1454.978299] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.979169] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1454.979997] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1454.980818] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1454.981641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1454.982469] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 09:11:18 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000100000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1454.985738] audit: type=1326 audit(1749460278.740:1973): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9238 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:11:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xf000000}) [ 1454.989867] audit: type=1326 audit(1749460278.746:1974): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9238 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1454.995691] audit: type=1326 audit(1749460278.746:1975): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9238 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1455.001965] audit: type=1326 audit(1749460278.746:1976): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9238 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1455.005551] audit: type=1326 audit(1749460278.746:1977): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9238 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1455.016687] loop0: detected capacity change from 0 to 2048 [ 1455.055814] EXT4-fs (loop0): Can't read superblock on 2nd try 09:11:18 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, 0x0, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:11:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:11:18 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000200000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:11:18 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x1000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:11:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x81403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4, 0x3, 0xfffffffc, 0x2, 0x3, 0x400, 0xfffe, 0x0, 0xfffffffc, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2c4100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) sendfile(0xffffffffffffffff, r2, 0x0, 0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000140)) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r5, &(0x7f00000000c0)="04", 0x1, 0x3ff03) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x43000, 0x3, 0x0, 0x4, 0x0, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000218000000010e3e301b372c5380f310e78820f93247d4a1b1c1ebf8ef8837f5df34b2e0cfedfe97f30171254920895edd8dd96a9fca8aa9c92b73bc5c8198e3c9db0e5c19a7ffbc5370a7e599c1dcb93ffb9f474fe0b2883ddbc2ca9aa583def7027508a659c7a049f587b1f85af7fd2b697544ea9e2c0471f15ea51ff02a45754a16ffd1b83774c38231ec49b313a7f71c2f3de5471a0494c7bb9e8d86c137cff9fa491353c64bf55789a7abe805837821af53de019f6fb520a1c216a551c9eb7c05d9b7de6dee27ef235be374fc802c45cde3b13362bd055bf6afedaeb3e99a94fb6a614cf2a035d766d7c65c7eef5836ce08677ef2790d407ed8dbed912b30e7b3a847", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="4ec066696c0000000036954569db231bf1a7c73921847aeaa9b6c267856256d90339650e0aa2cf0a7f15eb02c2b1ea7f026beb8454598c646eae56387f160b9ab4edae8e17b84f1e68f0777c0ceda8000060140195bbf18360e0bef207e27659d281457a"]) sendfile(r1, r0, 0x0, 0xffffffff000) 09:11:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x10000000}) 09:11:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:11:32 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x2000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:11:32 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 49) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:11:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 25) 09:11:32 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, 0x0, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:11:32 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000300000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1469.201155] FAULT_INJECTION: forcing a failure. [ 1469.201155] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.203623] CPU: 0 PID: 9288 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1469.205108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1469.206894] Call Trace: [ 1469.207465] dump_stack+0x107/0x167 [ 1469.208265] should_fail.cold+0x5/0xa [ 1469.209094] ? __kernfs_new_node+0xd4/0x860 [ 1469.210022] should_failslab+0x5/0x20 [ 1469.210835] kmem_cache_alloc+0x5b/0x310 [ 1469.211713] __kernfs_new_node+0xd4/0x860 [ 1469.212617] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1469.213637] ? lock_chain_count+0x20/0x20 [ 1469.214531] ? update_load_avg+0x162/0x1870 [ 1469.215457] ? find_held_lock+0x2c/0x110 [ 1469.216505] kernfs_new_node+0x18d/0x250 [ 1469.217391] kernfs_create_dir_ns+0x49/0x160 [ 1469.218350] internal_create_group+0x793/0xb30 [ 1469.219352] ? set_user_nice.part.0+0x2fd/0x760 [ 1469.220366] ? sysfs_remove_group+0x170/0x170 [ 1469.221342] ? lockdep_init_map_type+0x2c7/0x780 [ 1469.222372] ? blk_queue_flag_set+0x22/0x30 [ 1469.223299] ? __loop_update_dio+0x2d2/0x690 [ 1469.224267] loop_configure+0x953/0x1410 [ 1469.225160] lo_ioctl+0xa57/0x16b0 [ 1469.225915] ? avc_has_extended_perms+0x7f1/0xf40 [ 1469.226957] ? loop_set_status_old+0x250/0x250 [ 1469.227947] ? avc_ss_reset+0x180/0x180 [ 1469.228803] ? find_held_lock+0x2c/0x110 [ 1469.229695] ? __lock_acquire+0xbb1/0x5b00 [ 1469.230647] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1469.231770] ? generic_block_fiemap+0x60/0x60 [ 1469.232740] ? lock_downgrade+0x6d0/0x6d0 [ 1469.233628] ? build_open_flags+0x6f0/0x6f0 [ 1469.234556] ? loop_set_status_old+0x250/0x250 [ 1469.235532] blkdev_ioctl+0x291/0x710 [ 1469.236354] ? blkdev_common_ioctl+0x1930/0x1930 [ 1469.237356] ? selinux_file_ioctl+0xb6/0x270 [ 1469.238300] block_ioctl+0xf9/0x140 [ 1469.239074] ? blkdev_read_iter+0x1c0/0x1c0 [ 1469.240001] __x64_sys_ioctl+0x19a/0x210 [ 1469.240870] do_syscall_64+0x33/0x40 [ 1469.241674] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1469.242773] RIP: 0033:0x7ffb8254e8d7 [ 1469.243568] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1469.247536] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1469.249161] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1469.250673] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1469.252197] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1469.253700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1469.255210] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 09:11:33 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000900000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:11:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1469.259020] loop0: detected capacity change from 0 to 2048 [ 1469.288880] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1469.289665] FAULT_INJECTION: forcing a failure. [ 1469.289665] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.289689] CPU: 0 PID: 9287 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1469.289706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1469.294191] Call Trace: [ 1469.294751] dump_stack+0x107/0x167 [ 1469.295522] should_fail.cold+0x5/0xa [ 1469.296340] ? relay_open_buf.part.0+0xf9/0xc00 [ 1469.297325] should_failslab+0x5/0x20 [ 1469.298127] __kmalloc+0x72/0x390 [ 1469.298857] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1469.299944] relay_open_buf.part.0+0xf9/0xc00 [ 1469.300894] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1469.301993] relay_open+0x531/0xa10 [ 1469.302775] do_blk_trace_setup+0x4cf/0xc10 [ 1469.303689] ? _copy_from_user+0xfb/0x1b0 [ 1469.304573] __blk_trace_setup+0xca/0x180 [ 1469.305445] ? do_blk_trace_setup+0xc10/0xc10 [ 1469.306414] blk_trace_ioctl+0x155/0x290 [ 1469.307272] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1469.308311] ? do_vfs_ioctl+0x283/0x10d0 [ 1469.309165] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1469.310279] ? generic_block_fiemap+0x60/0x60 [ 1469.311221] ? lock_downgrade+0x6d0/0x6d0 [ 1469.312102] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1469.313124] blkdev_ioctl+0xc1/0x710 [ 1469.313908] ? blkdev_common_ioctl+0x1930/0x1930 [ 1469.314916] ? selinux_file_ioctl+0xb6/0x270 [ 1469.315845] block_ioctl+0xf9/0x140 [ 1469.316617] ? blkdev_read_iter+0x1c0/0x1c0 [ 1469.317532] __x64_sys_ioctl+0x19a/0x210 [ 1469.318396] do_syscall_64+0x33/0x40 [ 1469.319184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1469.320278] RIP: 0033:0x7f805ff83b19 [ 1469.321064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1469.324961] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1469.326565] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1469.328090] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1469.329595] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1469.331104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1469.332615] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1469.343834] kauditd_printk_skb: 19 callbacks suppressed [ 1469.343852] audit: type=1326 audit(1749460293.134:1997): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9283 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1469.361075] audit: type=1326 audit(1749460293.134:1998): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9283 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1469.389367] audit: type=1326 audit(1749460293.134:1999): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9283 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:11:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x20000000}) 09:11:33 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000d00000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1469.438465] audit: type=1326 audit(1749460293.134:2000): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9283 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:11:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000fffffdfd0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e18f3835023f5b3b1ab5ef114656c07d33f4486a667121fcc64e224d7be04b3b99c6a90aade7b4ac50aa8f0baa857a391d6929acc2c2413bb84c3fdef115b9385cfbfe18911dd6b5055cde977505603a5411b872f832408f9baeed6b777bee7d8fd3aa9b099"]) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000001e00)="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", 0x1000, r1}, 0x68) flock(r3, 0x6) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{}, "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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) r5 = syz_open_dev$vcsa(&(0x7f0000000280), 0xc, 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000000)) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) unshare(0x48020200) [ 1469.450236] audit: type=1326 audit(1749460293.136:2001): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9283 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1469.475403] audit: type=1326 audit(1749460293.136:2002): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9283 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:11:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 26) 09:11:33 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x3000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:11:33 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 50) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:11:33 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1469.502561] FAULT_INJECTION: forcing a failure. [ 1469.502561] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.504016] CPU: 1 PID: 9317 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1469.504983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1469.505974] Call Trace: [ 1469.506359] dump_stack+0x107/0x167 [ 1469.506791] should_fail.cold+0x5/0xa [ 1469.507240] ? create_object.isra.0+0x3a/0xa20 [ 1469.507907] should_failslab+0x5/0x20 [ 1469.508467] kmem_cache_alloc+0x5b/0x310 [ 1469.509114] create_object.isra.0+0x3a/0xa20 [ 1469.509635] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1469.510228] kmem_cache_alloc_trace+0x151/0x320 [ 1469.510788] relay_open_buf.part.0+0x91/0xc00 [ 1469.511454] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1469.512200] relay_open+0x531/0xa10 [ 1469.512746] do_blk_trace_setup+0x4cf/0xc10 [ 1469.513356] ? _copy_from_user+0xfb/0x1b0 [ 1469.513966] __blk_trace_setup+0xca/0x180 [ 1469.514553] ? do_blk_trace_setup+0xc10/0xc10 [ 1469.515275] blk_trace_ioctl+0x155/0x290 [ 1469.515854] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1469.516579] ? do_vfs_ioctl+0x283/0x10d0 [ 1469.517183] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1469.517960] ? generic_block_fiemap+0x60/0x60 [ 1469.518607] ? lock_downgrade+0x6d0/0x6d0 [ 1469.519089] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1469.519664] blkdev_ioctl+0xc1/0x710 [ 1469.520101] ? blkdev_common_ioctl+0x1930/0x1930 [ 1469.520644] ? selinux_file_ioctl+0xb6/0x270 [ 1469.521147] block_ioctl+0xf9/0x140 [ 1469.521572] ? blkdev_read_iter+0x1c0/0x1c0 [ 1469.522085] __x64_sys_ioctl+0x19a/0x210 [ 1469.522612] do_syscall_64+0x33/0x40 [ 1469.523199] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1469.523937] RIP: 0033:0x7f805ff83b19 [ 1469.524469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1469.526626] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1469.527523] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1469.528378] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1469.529221] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1469.530062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1469.530904] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1469.531253] audit: type=1326 audit(1749460293.136:2003): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9283 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1469.537742] audit: type=1326 audit(1749460293.136:2004): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9283 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1469.544417] audit: type=1326 audit(1749460293.136:2005): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9283 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1469.549809] audit: type=1326 audit(1749460293.136:2006): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9283 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1469.563130] FAULT_INJECTION: forcing a failure. [ 1469.563130] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.564515] CPU: 1 PID: 9324 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1469.565326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1469.566303] Call Trace: [ 1469.566620] dump_stack+0x107/0x167 [ 1469.567054] should_fail.cold+0x5/0xa [ 1469.567509] ? create_object.isra.0+0x3a/0xa20 [ 1469.568057] should_failslab+0x5/0x20 [ 1469.568508] kmem_cache_alloc+0x5b/0x310 [ 1469.568991] create_object.isra.0+0x3a/0xa20 [ 1469.569508] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1469.570106] kmem_cache_alloc+0x159/0x310 [ 1469.570601] __kernfs_new_node+0xd4/0x860 [ 1469.571094] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1469.571663] ? lock_acquire+0x197/0x470 [ 1469.572145] ? lock_chain_count+0x20/0x20 [ 1469.572637] ? lock_acquire+0x197/0x470 [ 1469.573117] ? task_rq_lock+0xab/0x270 [ 1469.573581] ? lock_release+0x680/0x680 [ 1469.574054] ? find_held_lock+0x2c/0x110 [ 1469.574538] kernfs_new_node+0x18d/0x250 [ 1469.575038] kernfs_create_dir_ns+0x49/0x160 [ 1469.575568] internal_create_group+0x793/0xb30 [ 1469.576123] ? set_user_nice.part.0+0x2fd/0x760 [ 1469.576678] ? sysfs_remove_group+0x170/0x170 [ 1469.577220] ? lockdep_init_map_type+0x2c7/0x780 [ 1469.577793] ? blk_queue_flag_set+0x22/0x30 [ 1469.578313] ? __loop_update_dio+0x2d2/0x690 [ 1469.578842] loop_configure+0x953/0x1410 [ 1469.579336] lo_ioctl+0xa57/0x16b0 [ 1469.579762] ? avc_has_extended_perms+0x7f1/0xf40 [ 1469.580348] ? loop_set_status_old+0x250/0x250 [ 1469.580895] ? avc_ss_reset+0x180/0x180 [ 1469.581374] ? find_held_lock+0x2c/0x110 [ 1469.581865] ? __lock_acquire+0xbb1/0x5b00 [ 1469.582403] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1469.583029] ? generic_block_fiemap+0x60/0x60 [ 1469.583568] ? lock_downgrade+0x6d0/0x6d0 [ 1469.584071] ? build_open_flags+0x6f0/0x6f0 [ 1469.584593] ? loop_set_status_old+0x250/0x250 [ 1469.585137] blkdev_ioctl+0x291/0x710 [ 1469.585592] ? blkdev_common_ioctl+0x1930/0x1930 [ 1469.586160] ? selinux_file_ioctl+0xb6/0x270 [ 1469.586689] block_ioctl+0xf9/0x140 [ 1469.587134] ? blkdev_read_iter+0x1c0/0x1c0 [ 1469.587649] __x64_sys_ioctl+0x19a/0x210 [ 1469.588155] do_syscall_64+0x33/0x40 [ 1469.588606] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1469.589230] RIP: 0033:0x7ffb8254e8d7 [ 1469.589692] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1469.591960] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1469.592894] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1469.593760] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1469.594632] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1469.594668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1469.594674] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1469.654201] loop0: detected capacity change from 0 to 2048 [ 1469.668633] EXT4-fs (loop0): Can't read superblock on 2nd try 09:11:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000e00000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:11:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="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"]) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000001e00)="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", 0x1000, r1}, 0x68) flock(r3, 0x6) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{}, "12852ee246b149ec4e0bc7bacf27cc444919aed26cef0ed88e61066a2602f8b898227884075400e6ab7a433f83d5130151c8dfae7fda7925d882d1bd49a816dbab08b93bc75cce1eda46d097976f4cc5f7cfe4dd50fbe285d8a564d752c42884c08f575250fcab04f62046484c523856295705a3047913d8c70f81ebe9a44583b3145d4883b5d8f4519f7bd1adba5a5fdf31732e2a606019faeb23344939796b3e16ccb29260de78997bc36cf68b66466bd25729dd0b7cde53f76be436e6bdc3bd6a575438acd24472bd98686376edad168e5c9a521d13390910b5093adc504ab0a0c63a5eda15bb29a3b805a6ddd7090f667725c83dd9bb290c2eabd26ca0a95bcd0770bbaeae50ae9dc5ec60a2db6e7d8ccf0cf11d86ab92e95c9859e57b7d6c77e4e80a4f5de84c49423d82065a91198987d5b28a2cf937a12ad1d16e21eba16e6f570b26c2fca9096f252b4ca6d594817141de6bc9ee612f89425037ee314296f7aaa6aa2eabcc3e3739ba934a7ed2f42651f9a3ad30a26b8bd96cac538d080741fafcfd3f384ed555e4b8690f92714a60526787b61756be8f7012d5fb6684b0176ec30eea403c5dde29a01465404a49f63fa29348bf2b125c5ae83e5c71eca9e1517a03c7a624702069d26e08ad61cbbe1098198eef3dbe0f4ab9b5fab5e80940054a62cfdcf624225fa414fbe9e13f5346fbdf9c289888d6e1b9d0dd2a6af4a58c9a466b8e1f3c394950ab04513e8e70bfbbecd5ca92eb58e5ca96c61817bdf3865fd87851da4bb522903939c2e667168cc4f45499db14e4400f984ebf141fbb324f0b1f79b10c352b870bb5230b5762f57562bdcc7e54e6ecbd0fa2b95ac263b7f3275717f928e958691d7c384bf169649ab482bd0dd2a85e3bb34ce3a04a782da6fa8a58abe6aa0fae7faea555e7b6c1d4762217bb1f929f8dcf45bb9b2a8627ae35a6905d275526df5e9bf336688d6769a594c3e6a13531edc89826d0a19c473c4e973fe0725ba9ac219586c8f24ce5cb8ddb8fb5a65c090e17f1bbc2bf1442c5710ee08eb88fbc041415dae75b376a66ab7ccac819596c991d7f39ffaef1e6a6d95735a35bf4cc6d201649fcc11e82981624be868a216f2f0e6fc1bc95e3a96b8e3148872b54bb5bb743dda6735846a3731282628f55effee084ea63aca27466d9af7e3c931a8b1de6a15e268c45846f28c74986e0b8089827b411f112c71da323b26c694441478f997d1f452ace55d47ad2e90156c1433ee49ae9af2fda73b3f89dce074f102a649545656c28202ab7d2f3c1fad6b77c7dd06b4f13c53ec2e79772cb212a45bdeb33a5d93d0c6c6493782407bfe669a55ece90dd8a2e133312985161011ddaf0c537476a1af6f396ebea7f39aa6b4bc75600ae9d8e09ed49e30ac62a640b8b15721eaa620622117bca7b89649e1e29a192ff7b998bffcafb7950ebb928a743fa80fe5eca83f6ee9479ef99834800b6dd0bca9103f2de13998560bd492fa6f4f4de37bcd18d7aa67bc3fa7d6f0696750e71566d2be7e779a2a9734f08a784eff904faca662ab7f39d53030247061375d35bfb110c52cb19dfcadab7e685bf2909b39c79f3a061d2820a79ed4557c2290bdd56b194dd38b02e2e4dcbad35b779517d77a78051c5bb9e68089178e2ec9020c2b3555985285b6f36d74ca5ce30013e8732f376a775bab324a463f020071703cc8eedff9ca0c45f8cea901e30a93fd3c2db06dbcef392aee894565f34aa7b15a3111ae8b59324999075432b1f557af94704a5048444cac1bf0622824af6ab18e4b8d9468d8d4abfb1700ce68bf34509002df3b101186734a00e14d15a5dd830c319242e6b1f3d2be2102e7af5a3a962ffa0505af53ec3de2761ef72f08baf030cd0f37f90a2bc6bedd1da0b2895537922863054871f51df4d253d182200f088178434c9141c9d9977ab39a5a3fadfe3f471440dcd714eb1f6ef993d71a72f5818225e3589830b3e113bc17570ab7d85c321335708357f54a140d02d3c8aa7783201610a2df33a22781786ce0cfd77ad0664117be6caaccb98fd20d285873899663c44e4896e935ed7d710cd35614fa79c4aad322a6af698d95ed49174f1ec7db75dc5b60ba86746a685625daf44d4e0abe8778711d5bedb6c84373e01d7d1f7cab254b8c9c306b25932d143ad90b4964c89911652f9f2dd38d577cbcdf599a4d8900b7ddf154c79ccf26f15ef344e9d680a843f255eb52815614ad9e5406b0062ad3ede64e287a7e8ee8b547e7ba12221b632f9a2a11e86e77635782a5136e6799d1fbb54511acb3039de65bf65fa7187754eb7bf02b01688112e81a559d8eaad867536ebe00bd411b339c9e3659b0d8fd5f3ecaf2fffce388eabc70ce6b9efdc304d1a3f81d828c7f14977b22c84ab72fc678cc120918e267a5f8de182d1d2a818706447ffaa77a650e4a692ae91eb36df2fe4465bf19ed7c41d688f5e6d2dfd4edf8b6adb9924e6a50c0a48ee4369f55edd167cc647cf4f37fe454a3f6497940042fdb06c45f4b3b929066e0315592abd29fb2e84772b56bc23f24bc493812439892db716597ec8c8f3a8750dc85b7fdf6cd97072c3350d2351a3bf6a4af1af83f339d349f8469e588c692f603ab20408b2c3222fa447ad0a70d54b299386dafafcc087ec61cff7f35dc16c6f5a37146c4f21d4bb85bad9440a38c39796be8baca4bad6fd2e9327b68b24254fbcd78bfde06a75afbf3235012529559369a7dd8354848e6c9aeca0139ad35c605fdc750d85d4399061264d05096b78a3b49b2fa6c67ca85eb908395f1f0288c165c544ed253ed696b0a0673f8d554dc206a90e9414b867519902da983a8e140de4314e31a6e8c0e92f3a64b6d34895ef66756b57690a0ab6e9c0e7d5050a43c1ec6bfca67c28c75c37ddf2d48baf8ea69d7c956fa1b36ac2e34e03678a58539a6c30cbd26bb498adaf33dd9c596899618b80b844957782d7b86abb708101e8944bf5da260b040f912564cad6968e410057046558c07c8629e1fd7a7f4e1d66ffc0e0106c104fb979c999a56fbf2bb6051332c71fe92e37213452ad485af96c1135ffc80febca188c2643f471907065904f1f85c9dc454dfd57a720c156a4a5f6b58a5e107df625acf38162d58cc4249346d97a95c9d926545c915f2c6bc8d173153c117e5d857f5975421968e1c55c60ac124cb923111fe16ac253a00971bbe9d0967e0281c4e76720d29185604774cefcc0619b4ce5699912f72bad2e8674199bd972d2e32a2a9b44103a4763e78c149495836c0ac42771d4dd2dd67a1e5d1f92d35cc553e80f5b60ba1320cf19b7c1c76a7faa5ed68f31d195d8e9a7a257ddcb81df965b113ec9a707a1b9b6cb404d2cdff61c23bb715485d81df4dc0491575a82c28e53ef01fe5438ba9e7199e2f981e5199a9ac86513f79261991734387e61931133f85aa1fa574275feec1a64b703e582bc48be1410d2c49c81dbbfd09f435327378cff74f24404b29097a1cd397c90845ad104e2867cea75c097f8347fca5a45c9b79e95ac0e35d56a642e606731a0e8b6383483adec9df9a58c0714183737102c2498c1de139fc479ca5e042490ae19d3860f318253c0e62c58bca7d4aa71cde7708676cbbf5ffc3519a72929b4ca7f384f8c89e4a37e6f5a4aeba8f2d9d982a9abe05ad8123b1dbb2bc8e064c9a068717ebb39a95e3b534eaee3269cf2169b25921ec0bf6c364cab323c92be5237d848a165c828898edda7c4f98d2db928857245eb18a93278ada9a36aab2fd3f0f16441bdb2e44c57a044f7c5344e2a4cb7854e32751546d52ebb02b196c4ff1ad8a7ab7b315a6512b3f7ffd4afb0acdd0c8ec0585039759d9a33101cc028a4a8ace8b4132955efbf8400aefda18d198cfc95aa8b7dac20215934eb4dfd47b1927a2ff8eebfc9ffbc7e2f63d1409666faafd48050c1a9f0e10e8915f2986337bc01ec727295198634611a1d6f55baaeeebf96c9acbc2404b69672f07d50eead240796c197dad25c1e8b67feea1a3f65c549ddbecee5ff26bde65120a64b54042693a6bbcbc1c49b65dc262de7b1b1fb47a3e93566225a7bf0c0b39523b1235d54b2e80afcb8d2b798e47a32a7552d97c50abc73cc000c38c4d5418f510d21c23d9590366d5ded87604e27c801893d022fb5454c5019129e60786f5eae86fbb8a9f7155bde6447aa1ebed65e598e6245deb033b8e945d96106cc6ac24021db90a2fa304a31add61293927738a2731aab673700d7b5117d8eaa5df59a90f622723326975d0f9e753e82bb716824cc5edbc3c6728999e9170c75ba6a4ac888447ce9b6f8929461946e8c63ea49e691dbb75ef48eece664da1e39c4f8bceaa8d14a3349909bab33380e79762d6a25fc1b49f3eebe345644e9073288f0965f524bdf4e7b8112417bd29c1f62735834be838c1553b73e7da9d5645fdea685320b415f151a29f966e8761a621c18703cf75c952a3c226f80c77732b4cdfd215bd00af717fd5948fdb0a48ba71f1f2c3743e7fa45e6407190466f28a41c7aefa96652de6ba0330085f9784df2ae2753854b791254ce89341c9ed07df7caf012f017e1991e2651998011cf673fae9064506dda031615401b63dbdf4ebf3d36e2e3d1470a9ccb78bd89995ed52eef55bbcedf216e2ab875cad325e44b6d3ebd22ffe8cb79b36a71eebbf34e29c06cba3ef978342288777651e3ced73109c073060a0f36846347a8a1153c549aa23a73f55d78c15e47c8f31b1958535a68ad617a686daeadc322e6adf42043a58562ecc1d7f5b9468f22fcd2d3eb6cb4aba97865f098f6408d02c52ad4963009c57afb16daedba301eace4d6b58bec2cb0d40d96c12aa4819cc1fdba49522495be1ccbe83c9a36cf40f5bc272efcd76172f83fc5788b480e8deba20c3355e1d405cb4961a05a619a8255d69923e075690ea6434a05a8a8cdc43dd986ecee55686172fd97671dafa6a3da991d998d49933d803de17271301798a64bad795062409ce705376b21d477c0e117c9d79c38bf4e9e4d0442ca98cb654014532e1acf0309439c16b1612ea929e6235b33945555f52b2ffb5fd409d71cb8c2a8feb9e16bc480f8157a24ba9dbb631e5db393cafef897d404ec7feaf585de2603b98f96d515d9168547c748717436ac7f970b2db860f0acb44a1b72a2fc88b590346759f91795f25ff7cb4f55341beeab8eafb469cebd36e5beac37ed79ae479009ee9965a2de3f3292dc73976f5bf653fe335a561daeb22a3a887a844bc207fea30198f6c4e5507484fb185d61452a20b508b941b2ac517c6ce2b977b5ac4e3d8299fad78527168041623ed30ae7ac594e642109365f9458687115c6a4fc2396ce3e19f1b35cad7525596c75fed918dcf3e879065c16d7ae9ebeff4018f4e29cc350ea2a6d75f2d34fbbdced9aef7530f1ff97c7cefa558c2e92fa4cd07b7fa46c02fc9504868f7f683ad81fec5dd42584de07a1a8fa62dbe7c22f57683421a8f71269f9ed4d52a3e30dee15adfaa9f9289eda0414d3fc156e1340fbdce5246773e535ed241b2ea52d7f3dfa1a73d9985f0b9962b98b9cfc6e2e50b39cddbd04e7e24a56a341b2935e800b7fb66dc960e85c4902130459a89f408a36ba5509eb7341d8e0b80a708a20f3ce09a64794dbe90fb5439f3c4b410c7a3ca55f266fffb6e6127fbcaec22b692712d723998204c86fc5abac93bdd8aae6e3da9507a1f5ac72f9df250247d0f39f4156bb61245193a59f8beaf2222501"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) r5 = syz_open_dev$vcsa(&(0x7f0000000280), 0xc, 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000000)) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) unshare(0x48020200) 09:11:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 27) 09:11:45 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:11:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:11:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x30280000}) 09:11:45 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x61120000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:11:45 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 51) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1481.731195] FAULT_INJECTION: forcing a failure. [ 1481.731195] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.733240] CPU: 0 PID: 9344 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1481.734109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1481.735173] Call Trace: [ 1481.735513] dump_stack+0x107/0x167 [ 1481.735981] should_fail.cold+0x5/0xa [ 1481.736482] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1481.737207] should_failslab+0x5/0x20 [ 1481.737691] kmem_cache_alloc+0x5b/0x310 [ 1481.738213] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1481.738923] idr_get_free+0x4b5/0x8f0 [ 1481.739419] idr_alloc_u32+0x170/0x2d0 [ 1481.739913] ? __fprop_inc_percpu_max+0x130/0x130 [ 1481.740538] ? lock_acquire+0x197/0x470 [ 1481.741043] ? __kernfs_new_node+0xff/0x860 [ 1481.741595] idr_alloc_cyclic+0x102/0x230 [ 1481.742121] ? idr_alloc+0x130/0x130 [ 1481.742588] ? rwlock_bug.part.0+0x90/0x90 [ 1481.743131] __kernfs_new_node+0x117/0x860 [ 1481.743675] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1481.744287] ? lock_acquire+0x197/0x470 [ 1481.744786] ? lock_chain_count+0x20/0x20 [ 1481.745312] ? lock_acquire+0x197/0x470 [ 1481.745821] ? task_rq_lock+0xab/0x270 [ 1481.746313] ? lock_release+0x680/0x680 [ 1481.746808] ? find_held_lock+0x2c/0x110 [ 1481.747320] kernfs_new_node+0x18d/0x250 [ 1481.747830] kernfs_create_dir_ns+0x49/0x160 [ 1481.748409] internal_create_group+0x793/0xb30 [ 1481.748981] ? set_user_nice.part.0+0x2fd/0x760 [ 1481.749562] ? sysfs_remove_group+0x170/0x170 [ 1481.750131] ? lockdep_init_map_type+0x2c7/0x780 [ 1481.750725] ? blk_queue_flag_set+0x22/0x30 [ 1481.751274] ? __loop_update_dio+0x2d2/0x690 [ 1481.751828] loop_configure+0x953/0x1410 [ 1481.752354] lo_ioctl+0xa57/0x16b0 [ 1481.752809] ? avc_has_extended_perms+0x7f1/0xf40 [ 1481.753415] ? loop_set_status_old+0x250/0x250 [ 1481.753990] ? avc_ss_reset+0x180/0x180 [ 1481.754491] ? find_held_lock+0x2c/0x110 [ 1481.755011] ? __lock_acquire+0xbb1/0x5b00 [ 1481.755574] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1481.756253] ? generic_block_fiemap+0x60/0x60 [ 1481.756812] ? lock_downgrade+0x6d0/0x6d0 [ 1481.757331] ? build_open_flags+0x6f0/0x6f0 [ 1481.757875] ? loop_set_status_old+0x250/0x250 [ 1481.758441] blkdev_ioctl+0x291/0x710 [ 1481.758912] ? blkdev_common_ioctl+0x1930/0x1930 [ 1481.759513] ? selinux_file_ioctl+0xb6/0x270 [ 1481.760071] block_ioctl+0xf9/0x140 [ 1481.760524] ? blkdev_read_iter+0x1c0/0x1c0 [ 1481.761062] __x64_sys_ioctl+0x19a/0x210 [ 1481.761582] do_syscall_64+0x33/0x40 [ 1481.762045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1481.762682] RIP: 0033:0x7ffb8254e8d7 [ 1481.763153] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1481.765463] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1481.766417] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1481.767304] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1481.768196] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1481.769090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1481.769976] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1481.773576] loop0: detected capacity change from 0 to 2048 [ 1481.797375] EXT4-fs (loop0): Can't read superblock on 2nd try 09:11:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000ffffff0f00000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:11:45 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x7fffe000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:11:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1481.854617] kauditd_printk_skb: 19 callbacks suppressed [ 1481.854628] audit: type=1326 audit(1749460305.645:2026): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9347 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1481.858033] audit: type=1326 audit(1749460305.645:2027): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9347 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1481.861081] audit: type=1326 audit(1749460305.645:2028): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9347 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1481.865673] FAULT_INJECTION: forcing a failure. [ 1481.865673] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.868565] CPU: 1 PID: 9353 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1481.870114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1481.871985] Call Trace: [ 1481.872603] dump_stack+0x107/0x167 [ 1481.873437] should_fail.cold+0x5/0xa [ 1481.874306] ? relay_open_buf.part.0+0x472/0xc00 [ 1481.875383] should_failslab+0x5/0x20 [ 1481.875912] audit: type=1326 audit(1749460305.647:2029): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9347 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1481.876253] __kmalloc+0x72/0x390 [ 1481.879549] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1481.880710] relay_open_buf.part.0+0x472/0xc00 [ 1481.881760] relay_open+0x531/0xa10 [ 1481.882599] do_blk_trace_setup+0x4cf/0xc10 [ 1481.883583] ? _copy_from_user+0xfb/0x1b0 [ 1481.884536] __blk_trace_setup+0xca/0x180 [ 1481.885487] ? do_blk_trace_setup+0xc10/0xc10 [ 1481.886541] blk_trace_ioctl+0x155/0x290 [ 1481.887472] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1481.887615] audit: type=1326 audit(1749460305.647:2030): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9347 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1481.888598] ? do_vfs_ioctl+0x283/0x10d0 [ 1481.888620] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1481.888644] ? generic_block_fiemap+0x60/0x60 [ 1481.894251] ? lock_downgrade+0x6d0/0x6d0 [ 1481.895192] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1481.896301] blkdev_ioctl+0xc1/0x710 [ 1481.897149] ? blkdev_common_ioctl+0x1930/0x1930 [ 1481.898240] ? selinux_file_ioctl+0xb6/0x270 [ 1481.899253] block_ioctl+0xf9/0x140 [ 1481.900083] ? blkdev_read_iter+0x1c0/0x1c0 [ 1481.901065] __x64_sys_ioctl+0x19a/0x210 [ 1481.901986] do_syscall_64+0x33/0x40 [ 1481.902827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1481.903987] RIP: 0033:0x7f805ff83b19 [ 1481.904857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1481.909040] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1481.910783] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1481.912413] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1481.914041] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1481.915660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1481.917291] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 09:11:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 28) [ 1481.930596] audit: type=1326 audit(1749460305.647:2031): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9347 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1481.950277] audit: type=1326 audit(1749460305.719:2032): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9347 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:11:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000fffffff500000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:11:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x38280000}) [ 1481.974013] audit: type=1326 audit(1749460305.719:2033): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9347 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1481.993297] audit: type=1326 audit(1749460305.719:2034): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9347 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1482.016088] audit: type=1326 audit(1749460305.719:2035): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9347 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1482.027556] FAULT_INJECTION: forcing a failure. [ 1482.027556] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.031294] CPU: 1 PID: 9371 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1482.033207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1482.035794] Call Trace: [ 1482.036596] dump_stack+0x107/0x167 [ 1482.037548] should_fail.cold+0x5/0xa [ 1482.038724] ? kobject_get_path+0xc5/0x1f0 [ 1482.039976] should_failslab+0x5/0x20 [ 1482.041064] __kmalloc+0x72/0x390 [ 1482.042040] ? trace_hardirqs_on+0x5b/0x180 [ 1482.043022] kobject_get_path+0xc5/0x1f0 [ 1482.043945] kobject_uevent_env+0x251/0xfd0 [ 1482.044945] __loop_clr_fd+0x650/0xf00 [ 1482.045829] lo_release+0x1ad/0x1f0 [ 1482.046656] ? __loop_clr_fd+0xf00/0xf00 [ 1482.047569] __blkdev_put+0x64c/0x8a0 [ 1482.048459] ? fsync_bdev+0xd0/0xd0 [ 1482.049291] ? blkdev_put+0x85/0x530 [ 1482.050134] blkdev_close+0x8c/0xb0 [ 1482.050949] __fput+0x285/0x9f0 [ 1482.051696] ? blkdev_put+0x530/0x530 [ 1482.052592] task_work_run+0xe2/0x1a0 [ 1482.053461] exit_to_user_mode_prepare+0x186/0x190 [ 1482.054572] syscall_exit_to_user_mode+0x38/0x1d0 [ 1482.055661] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1482.056828] RIP: 0033:0x7ffb8250172b [ 1482.057667] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 1482.061798] RSP: 002b:00007ffb7fac3f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1482.063512] RAX: 0000000000000000 RBX: 00007ffb7fac46bc RCX: 00007ffb8250172b [ 1482.065124] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1482.066725] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1482.068321] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010 [ 1482.069928] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 09:11:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 29) 09:11:59 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 52) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:11:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:11:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x40000000}) 09:11:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000fffffff00000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:11:59 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:11:59 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x7ffff000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:11:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/134, 0x86}], 0x1, 0x63, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x5) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="f7ffffff4cc3e06d0008ffa8258c088edb0694f517655540509ce8f7ea8b46a7794dd8491ad66ffed27c3779a60a3962e91fc94fdf7f9710a72e8feb3129f1a64b197ad8d9a7e0339a1bcf52f388ad99f823be233357d6d6d85566be263d3d6b3fda2a46cc"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="b92b66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114030000000000000000fcd38d0a302906ffc32f46cf3af18994531a341440560ab5b9e8f25260ef7b4e28db855ed9e895bd4b2fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bd1f20fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f000000dfcc0800"/228]) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000007a8f5cea9ebc5cfe5973b412d11cbaebec4a6c17420fba51a362205ab77501d78851ee2c0fa5690a86d5980a26017869d2aa4ec869b4a2582c874aa7c1b5d7b3ff591b41f9559d5acbfa1eaba260a8017f0dde2fd33e88a68dc51bf78649db4f2fcf1be2045a21bc09000000000000008e0734765d043e3860c0b0b2791bc285d747bf4155a328ef40c499ea9c14a57f5e9bc5f2a560ac163801530baf5db46e5f6765b778d8ba332b1ef15cd7660b9a98248b878b3a0e04ac0d00608c9b8db398e3e0378c0a6394fa33a298d457443ce6725d8a"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000040)=""/29, 0x1d}], 0x1, 0xffff57e9, 0x0) r8 = dup2(r3, r5) open_tree(r8, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1495.409274] FAULT_INJECTION: forcing a failure. [ 1495.409274] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.410642] CPU: 1 PID: 9379 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1495.411426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1495.412380] Call Trace: [ 1495.412689] dump_stack+0x107/0x167 [ 1495.413105] should_fail.cold+0x5/0xa [ 1495.413547] ? __kernfs_new_node+0xd4/0x860 [ 1495.414049] should_failslab+0x5/0x20 [ 1495.414486] kmem_cache_alloc+0x5b/0x310 [ 1495.414959] __kernfs_new_node+0xd4/0x860 [ 1495.415434] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1495.415975] ? kernfs_add_one+0x36e/0x4d0 [ 1495.416458] ? mutex_lock_io_nested+0xf30/0xf30 [ 1495.416992] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1495.417544] kernfs_new_node+0x18d/0x250 [ 1495.418013] __kernfs_create_file+0x51/0x350 [ 1495.418520] sysfs_add_file_mode_ns+0x221/0x560 [ 1495.419050] internal_create_group+0x324/0xb30 [ 1495.419579] ? sysfs_remove_group+0x170/0x170 [ 1495.420096] ? lockdep_init_map_type+0x2c7/0x780 [ 1495.420650] ? blk_queue_flag_set+0x22/0x30 [ 1495.421145] ? __loop_update_dio+0x2d2/0x690 [ 1495.421648] loop_configure+0x953/0x1410 [ 1495.422121] lo_ioctl+0xa57/0x16b0 [ 1495.422532] ? avc_has_extended_perms+0x7f1/0xf40 [ 1495.423087] ? loop_set_status_old+0x250/0x250 [ 1495.423616] ? avc_ss_reset+0x180/0x180 [ 1495.424072] ? find_held_lock+0x2c/0x110 [ 1495.424554] ? __lock_acquire+0xbb1/0x5b00 [ 1495.425073] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1495.425673] ? generic_block_fiemap+0x60/0x60 [ 1495.426191] ? lock_downgrade+0x6d0/0x6d0 [ 1495.426663] ? build_open_flags+0x6f0/0x6f0 [ 1495.427161] ? loop_set_status_old+0x250/0x250 [ 1495.427680] blkdev_ioctl+0x291/0x710 [ 1495.428116] ? blkdev_common_ioctl+0x1930/0x1930 [ 1495.428666] ? selinux_file_ioctl+0xb6/0x270 [ 1495.429169] block_ioctl+0xf9/0x140 [ 1495.429587] ? blkdev_read_iter+0x1c0/0x1c0 [ 1495.430087] __x64_sys_ioctl+0x19a/0x210 [ 1495.430555] do_syscall_64+0x33/0x40 [ 1495.430982] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1495.431564] RIP: 0033:0x7ffb8254e8d7 [ 1495.431994] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1495.434094] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1495.434972] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1495.435794] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1495.436616] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1495.437428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1495.438243] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1495.442250] loop0: detected capacity change from 0 to 2048 [ 1495.459553] FAULT_INJECTION: forcing a failure. [ 1495.459553] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.461038] CPU: 1 PID: 9382 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1495.461846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1495.462807] Call Trace: [ 1495.463120] dump_stack+0x107/0x167 [ 1495.463546] should_fail.cold+0x5/0xa [ 1495.463994] ? relay_open_buf.part.0+0x472/0xc00 [ 1495.464567] should_failslab+0x5/0x20 [ 1495.465012] __kmalloc+0x72/0x390 [ 1495.465410] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1495.465990] relay_open_buf.part.0+0x472/0xc00 [ 1495.466520] relay_open+0x531/0xa10 [ 1495.466943] do_blk_trace_setup+0x4cf/0xc10 [ 1495.467436] ? _copy_from_user+0xfb/0x1b0 [ 1495.467913] __blk_trace_setup+0xca/0x180 [ 1495.468398] ? do_blk_trace_setup+0xc10/0xc10 [ 1495.468928] blk_trace_ioctl+0x155/0x290 [ 1495.469394] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1495.469956] ? do_vfs_ioctl+0x283/0x10d0 [ 1495.470420] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1495.471031] ? generic_block_fiemap+0x60/0x60 [ 1495.471543] ? lock_downgrade+0x6d0/0x6d0 [ 1495.472018] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1495.472582] blkdev_ioctl+0xc1/0x710 [ 1495.473011] ? blkdev_common_ioctl+0x1930/0x1930 [ 1495.473554] ? selinux_file_ioctl+0xb6/0x270 [ 1495.474058] block_ioctl+0xf9/0x140 [ 1495.474473] ? blkdev_read_iter+0x1c0/0x1c0 [ 1495.474964] __x64_sys_ioctl+0x19a/0x210 [ 1495.475431] do_syscall_64+0x33/0x40 [ 1495.475857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1495.476451] RIP: 0033:0x7f805ff83b19 [ 1495.476892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1495.479063] RSP: 002b:00007f805d4f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1495.479966] RAX: ffffffffffffffda RBX: 00007f8060096f60 RCX: 00007f805ff83b19 [ 1495.480818] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1495.481664] RBP: 00007f805d4f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1495.482510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1495.483358] R13: 00007ffd0261caef R14: 00007f805d4f9300 R15: 0000000000022000 [ 1495.488443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1495.513672] kauditd_printk_skb: 3 callbacks suppressed [ 1495.513682] audit: type=1326 audit(1749460319.304:2039): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9385 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1495.517498] audit: type=1326 audit(1749460319.308:2040): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9385 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1495.524718] audit: type=1326 audit(1749460319.312:2041): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9385 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1495.527504] audit: type=1326 audit(1749460319.313:2042): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9385 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1495.542088] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1495.546185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.547075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.548016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1495.557259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 09:11:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f5ffffff00000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1495.579251] audit: type=1326 audit(1749460319.314:2043): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9385 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:11:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x40280000}) 09:11:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:11:59 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xa40f0000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1495.603871] audit: type=1326 audit(1749460319.327:2044): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9385 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:11:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 30) 09:11:59 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1495.635372] audit: type=1326 audit(1749460319.329:2045): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9385 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1495.662169] audit: type=1326 audit(1749460319.329:2046): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9385 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:11:59 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) (fail_nth: 53) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1495.696273] audit: type=1326 audit(1749460319.329:2047): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9385 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:11:59 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xffffe000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:11:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0xc0b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000180)={0x6, 'vlan1\x00', {0x9}, 0xf801}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 09:11:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1495.712193] audit: type=1326 audit(1749460319.348:2048): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9385 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:11:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000001bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1495.750204] FAULT_INJECTION: forcing a failure. [ 1495.750204] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.752874] CPU: 0 PID: 9415 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1495.754476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1495.756359] Call Trace: [ 1495.756977] dump_stack+0x107/0x167 [ 1495.757822] should_fail.cold+0x5/0xa [ 1495.758706] ? create_object.isra.0+0x3a/0xa20 [ 1495.759768] should_failslab+0x5/0x20 [ 1495.760640] kmem_cache_alloc+0x5b/0x310 [ 1495.761551] create_object.isra.0+0x3a/0xa20 [ 1495.762546] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1495.763698] kmem_cache_alloc+0x159/0x310 [ 1495.764660] __kernfs_new_node+0xd4/0x860 [ 1495.765607] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1495.766677] ? kernfs_add_one+0x36e/0x4d0 [ 1495.767628] ? mutex_lock_io_nested+0xf30/0xf30 [ 1495.768694] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1495.769791] kernfs_new_node+0x18d/0x250 [ 1495.770715] __kernfs_create_file+0x51/0x350 [ 1495.771719] sysfs_add_file_mode_ns+0x221/0x560 [ 1495.772788] internal_create_group+0x324/0xb30 [ 1495.773839] ? sysfs_remove_group+0x170/0x170 [ 1495.774852] ? lockdep_init_map_type+0x2c7/0x780 [ 1495.775936] ? blk_queue_flag_set+0x22/0x30 [ 1495.776914] ? __loop_update_dio+0x2d2/0x690 [ 1495.777901] loop_configure+0x953/0x1410 [ 1495.778815] lo_ioctl+0xa57/0x16b0 [ 1495.779644] ? avc_has_extended_perms+0x7f1/0xf40 [ 1495.780906] ? loop_set_status_old+0x250/0x250 [ 1495.782077] ? avc_ss_reset+0x180/0x180 [ 1495.783006] ? find_held_lock+0x2c/0x110 [ 1495.783968] ? __lock_acquire+0xbb1/0x5b00 [ 1495.784994] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1495.786148] ? generic_block_fiemap+0x60/0x60 [ 1495.787146] ? lock_downgrade+0x6d0/0x6d0 [ 1495.788105] ? build_open_flags+0x6f0/0x6f0 [ 1495.789100] ? loop_set_status_old+0x250/0x250 [ 1495.790123] blkdev_ioctl+0x291/0x710 [ 1495.790969] ? blkdev_common_ioctl+0x1930/0x1930 [ 1495.792035] ? selinux_file_ioctl+0xb6/0x270 [ 1495.793069] block_ioctl+0xf9/0x140 [ 1495.793910] ? blkdev_read_iter+0x1c0/0x1c0 [ 1495.794913] __x64_sys_ioctl+0x19a/0x210 [ 1495.795860] do_syscall_64+0x33/0x40 [ 1495.796730] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1495.797917] RIP: 0033:0x7ffb8254e8d7 [ 1495.798779] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1495.803060] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1495.804847] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1495.806507] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1495.808178] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1495.809849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1495.811506] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1495.817526] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 1495.831680] loop0: detected capacity change from 0 to 2048 09:11:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x48280000}) [ 1495.887175] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1495.888353] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1495.895554] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1495.901160] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1495.902311] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1495.913867] netlink: 'syz-executor.3': attribute type 7 has an invalid length. 09:12:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 31) 09:12:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xf5ffffff}) 09:12:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:12:13 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:12:13 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:12:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$packet(0x11, 0x2, 0x300) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x10040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0x101, 0x70bd25, 0x0, {0x1}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0x20000000}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRESOCT, @ANYRESDEC, @ANYRES64=r1, @ANYBLOB="ae91e1", @ANYRES64=r2, @ANYRESHEX=r3], 0xfdef) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) 09:12:13 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x7ffffffff000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1509.274233] FAULT_INJECTION: forcing a failure. [ 1509.274233] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.277284] CPU: 0 PID: 9442 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1509.279035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1509.281158] Call Trace: [ 1509.281848] dump_stack+0x107/0x167 09:12:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000002bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1509.282923] should_fail.cold+0x5/0xa [ 1509.283922] ? __kernfs_new_node+0xd4/0x860 [ 1509.285036] should_failslab+0x5/0x20 [ 1509.286006] kmem_cache_alloc+0x5b/0x310 [ 1509.287056] __kernfs_new_node+0xd4/0x860 [ 1509.288118] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1509.289328] ? kernfs_add_one+0x36e/0x4d0 [ 1509.290393] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1509.291616] ? wait_for_completion_io+0x270/0x270 [ 1509.292861] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1509.294207] kernfs_new_node+0x18d/0x250 [ 1509.294243] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1509.295239] __kernfs_create_file+0x51/0x350 [ 1509.295270] sysfs_add_file_mode_ns+0x221/0x560 [ 1509.295308] internal_create_group+0x324/0xb30 [ 1509.297367] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1509.298419] ? sysfs_remove_group+0x170/0x170 [ 1509.298448] ? lockdep_init_map_type+0x2c7/0x780 [ 1509.298480] ? blk_queue_flag_set+0x22/0x30 [ 1509.306364] ? __loop_update_dio+0x2d2/0x690 [ 1509.307498] loop_configure+0x953/0x1410 [ 1509.308561] lo_ioctl+0xa57/0x16b0 [ 1509.309355] ? avc_has_extended_perms+0x7f1/0xf40 [ 1509.310380] ? loop_set_status_old+0x250/0x250 [ 1509.311346] ? avc_ss_reset+0x180/0x180 [ 1509.312189] ? find_held_lock+0x2c/0x110 [ 1509.313073] ? __lock_acquire+0xbb1/0x5b00 [ 1509.314021] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1509.315125] ? generic_block_fiemap+0x60/0x60 [ 1509.316071] ? lock_downgrade+0x6d0/0x6d0 [ 1509.316951] ? build_open_flags+0x6f0/0x6f0 [ 1509.317867] ? loop_set_status_old+0x250/0x250 [ 1509.318824] blkdev_ioctl+0x291/0x710 [ 1509.319628] ? blkdev_common_ioctl+0x1930/0x1930 [ 1509.320642] ? selinux_file_ioctl+0xb6/0x270 [ 1509.321577] block_ioctl+0xf9/0x140 [ 1509.322342] ? blkdev_read_iter+0x1c0/0x1c0 [ 1509.323250] __x64_sys_ioctl+0x19a/0x210 [ 1509.324114] do_syscall_64+0x33/0x40 [ 1509.324911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1509.325989] RIP: 0033:0x7ffb8254e8d7 [ 1509.326773] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1509.330656] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1509.332271] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1509.333778] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1509.335280] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1509.336790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1509.338289] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1509.340415] loop0: detected capacity change from 0 to 2048 [ 1509.346349] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1509.370719] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1509.372946] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1509.383407] kauditd_printk_skb: 18 callbacks suppressed [ 1509.383427] audit: type=1326 audit(1749460333.173:2067): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1509.397573] audit: type=1326 audit(1749460333.173:2068): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:12:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000003bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1509.427225] audit: type=1326 audit(1749460333.181:2069): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1509.441245] audit: type=1326 audit(1749460333.182:2070): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1509.465313] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1509.467411] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1509.487105] audit: type=1326 audit(1749460333.182:2071): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:12:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 32) [ 1509.499755] audit: type=1326 audit(1749460333.183:2072): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1509.504550] audit: type=1326 audit(1749460333.184:2073): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1509.511693] audit: type=1326 audit(1749460333.184:2074): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1509.522377] audit: type=1326 audit(1749460333.185:2075): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1509.530489] audit: type=1326 audit(1749460333.185:2076): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9447 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1509.575535] FAULT_INJECTION: forcing a failure. [ 1509.575535] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.577962] CPU: 0 PID: 9471 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1509.579400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1509.581191] Call Trace: [ 1509.581757] dump_stack+0x107/0x167 [ 1509.582540] should_fail.cold+0x5/0xa [ 1509.583353] ? create_object.isra.0+0x3a/0xa20 [ 1509.584335] should_failslab+0x5/0x20 [ 1509.585145] kmem_cache_alloc+0x5b/0x310 [ 1509.586021] create_object.isra.0+0x3a/0xa20 [ 1509.586956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1509.588042] kmem_cache_alloc+0x159/0x310 [ 1509.588945] __kernfs_new_node+0xd4/0x860 [ 1509.589832] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1509.590825] ? kernfs_add_one+0x36e/0x4d0 [ 1509.591711] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1509.592748] ? wait_for_completion_io+0x270/0x270 [ 1509.593776] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1509.594895] kernfs_new_node+0x18d/0x250 [ 1509.595769] __kernfs_create_file+0x51/0x350 [ 1509.596719] sysfs_add_file_mode_ns+0x221/0x560 [ 1509.597721] internal_create_group+0x324/0xb30 [ 1509.598702] ? sysfs_remove_group+0x170/0x170 [ 1509.599665] ? lockdep_init_map_type+0x2c7/0x780 [ 1509.600691] ? blk_queue_flag_set+0x22/0x30 [ 1509.601614] ? __loop_update_dio+0x2d2/0x690 [ 1509.602559] loop_configure+0x953/0x1410 [ 1509.603433] lo_ioctl+0xa57/0x16b0 [ 1509.604192] ? avc_has_extended_perms+0x7f1/0xf40 [ 1509.605232] ? loop_set_status_old+0x250/0x250 [ 1509.606210] ? avc_ss_reset+0x180/0x180 [ 1509.607062] ? find_held_lock+0x2c/0x110 [ 1509.607940] ? __lock_acquire+0xbb1/0x5b00 [ 1509.608901] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1509.610019] ? generic_block_fiemap+0x60/0x60 [ 1509.610955] ? lock_downgrade+0x6d0/0x6d0 [ 1509.611844] ? build_open_flags+0x6f0/0x6f0 [ 1509.612789] ? loop_set_status_old+0x250/0x250 [ 1509.613754] blkdev_ioctl+0x291/0x710 [ 1509.614576] ? blkdev_common_ioctl+0x1930/0x1930 [ 1509.615593] ? selinux_file_ioctl+0xb6/0x270 [ 1509.616546] block_ioctl+0xf9/0x140 [ 1509.617300] ? blkdev_read_iter+0x1c0/0x1c0 [ 1509.618189] __x64_sys_ioctl+0x19a/0x210 [ 1509.619035] do_syscall_64+0x33/0x40 [ 1509.619822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1509.620910] RIP: 0033:0x7ffb8254e8d7 [ 1509.621694] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1509.625581] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1509.627193] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1509.628713] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1509.630223] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1509.631733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1509.633257] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1509.658372] loop0: detected capacity change from 0 to 2048 [ 1509.686597] EXT4-fs (loop0): Can't read superblock on 2nd try 09:12:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 33) 09:12:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000009bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:12:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000300)={0x966e, 0x80, 0x2, 0x6, 0x6, 0xd02}) syz_io_uring_setup(0x2e3a, &(0x7f0000000000)={0x0, 0x61d4, 0x20, 0x2, 0x3b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xa010}}, 0x5) 09:12:27 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x2, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1523.918616] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s 09:12:27 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1523.920857] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:12:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xf8ff3f00}) 09:12:27 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x8000000000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1523.943098] kauditd_printk_skb: 6 callbacks suppressed [ 1523.943111] audit: type=1326 audit(1749460347.733:2083): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9482 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1523.948322] audit: type=1326 audit(1749460347.739:2084): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9482 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1523.954546] audit: type=1326 audit(1749460347.743:2085): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9482 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1523.958903] FAULT_INJECTION: forcing a failure. [ 1523.958903] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.961668] CPU: 1 PID: 9494 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1523.963274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1523.965154] Call Trace: [ 1523.965756] dump_stack+0x107/0x167 [ 1523.966580] should_fail.cold+0x5/0xa [ 1523.967443] ? __kernfs_new_node+0xd4/0x860 [ 1523.968447] should_failslab+0x5/0x20 [ 1523.969319] kmem_cache_alloc+0x5b/0x310 09:12:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, 0x0, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1523.970250] __kernfs_new_node+0xd4/0x860 [ 1523.971404] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1523.972478] ? kernfs_add_one+0x36e/0x4d0 [ 1523.973421] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1523.974515] ? wait_for_completion_io+0x270/0x270 [ 1523.974837] audit: type=1326 audit(1749460347.749:2086): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9482 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1523.975593] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1523.975623] kernfs_new_node+0x18d/0x250 [ 1523.980634] __kernfs_create_file+0x51/0x350 [ 1523.981642] sysfs_add_file_mode_ns+0x221/0x560 [ 1523.982712] internal_create_group+0x324/0xb30 [ 1523.983758] ? sysfs_remove_group+0x170/0x170 [ 1523.984790] ? lockdep_init_map_type+0x2c7/0x780 [ 1523.985860] ? blk_queue_flag_set+0x22/0x30 [ 1523.986834] ? __loop_update_dio+0x2d2/0x690 [ 1523.987834] loop_configure+0x953/0x1410 [ 1523.988778] lo_ioctl+0xa57/0x16b0 [ 1523.989579] ? avc_has_extended_perms+0x7f1/0xf40 [ 1523.990684] ? loop_set_status_old+0x250/0x250 [ 1523.991724] ? avc_ss_reset+0x180/0x180 [ 1523.992634] ? find_held_lock+0x2c/0x110 [ 1523.993572] ? __lock_acquire+0xbb1/0x5b00 [ 1523.994593] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1523.995775] ? generic_block_fiemap+0x60/0x60 [ 1523.996802] ? lock_downgrade+0x6d0/0x6d0 [ 1523.997743] ? build_open_flags+0x6f0/0x6f0 [ 1523.998739] ? loop_set_status_old+0x250/0x250 [ 1523.999779] blkdev_ioctl+0x291/0x710 [ 1524.000665] ? blkdev_common_ioctl+0x1930/0x1930 [ 1524.001739] ? selinux_file_ioctl+0xb6/0x270 [ 1524.002735] block_ioctl+0xf9/0x140 [ 1524.003552] ? blkdev_read_iter+0x1c0/0x1c0 [ 1524.004536] __x64_sys_ioctl+0x19a/0x210 [ 1524.005457] do_syscall_64+0x33/0x40 [ 1524.006296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1524.007463] RIP: 0033:0x7ffb8254e8d7 [ 1524.008312] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1524.012509] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1524.014242] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1524.015874] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1524.017491] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1524.019103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1524.020737] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 09:12:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000dbbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1524.026535] loop0: detected capacity change from 0 to 2048 [ 1524.064286] audit: type=1326 audit(1749460347.855:2087): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9482 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1524.069674] audit: type=1326 audit(1749460347.859:2088): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9482 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1524.080984] audit: type=1326 audit(1749460347.859:2089): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9482 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1524.093694] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1524.138722] audit: type=1326 audit(1749460347.866:2090): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9482 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1524.141993] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1524.143362] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1524.158290] audit: type=1326 audit(1749460347.867:2091): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9482 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1524.162509] audit: type=1326 audit(1749460347.869:2092): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9482 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:12:27 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x20000000000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:12:27 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x301, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:12:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x28, 0x10, 0x409, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0x8, 0x4, 0x0, 0x1, [@generic="dc050000"]}]}, 0x28}}, 0x0) setresuid(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) r7 = getgid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r9, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)={0x152c, 0x3b, 0x8, 0x70bd2c, 0x25dfdbfd, "", [@typed={0xc, 0x66, 0x0, 0x0, @u64=0x4}, @nested={0x37e, 0x87, 0x0, 0x1, [@generic="e6241dd1397aa82f0ec4371ecc7cda4e6bbfb040f4698858c7f0b827ac93e50f78b5a95383ad7429ac33f0cf106d43b1b54b4214ce152836b565a3a0bef0aa1183f807c842876bd7885d37c78a4d9b9fcd66f9a2337700451121212740013f8a04f3236d10d8f3cd30c3d028b2370d8fba0cf6115f4b284c29110a645b21a563ec007416c139d9fd1599a51ce5f6125eda074e42ff440e55a7a60e5d3385e2de680304a92c26ebec38efad0035017b2275e363ad41d995dd5a6a2cebe058f48026684747b5c48a1d9fab475d380139785f1e478133f61ead2ce13a30385fd43c11c1f7", @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x37}}, @generic="3e9df653002daa19543b47b6409a694e559fd103032a7847f6a63dcef389a416a0739828ec47b01b8f241467fe04394520cdb9c64f075e6379c27023c6fe8393bea1a3ec78cc289d7b22e209df2b9398f198542025f7741449ddfcb0cd85d47ea3ea4609c8e0eb85007dcba65d0d1bebce82ed6c6f66", @typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="6e41cf765554408a62ca05a851839b54f875f2dd2bb3384d3387815276b6da8af7185c5d1d35245e88615831ce676d320de3aa127d85f71ea93a94d58d85b61631ff38656605effa87e6f979c1d8b6cea628e07900b5d8a6eea6ef43bfa3b19b681d5794d0db6912745fd243b90c33ccebf1a5ff4f65b2cbb02b252804164cf8d79ac6f77af8c1fd18a71fda11d1586ca1c96014fa9eb6404eedc2a9c2869fe71abc63fb7c6c792de72068954964fedf462ed04e2542159d20667a1d063df26c3a0a60489cb7ebe80a59", @typed={0x8, 0x2f, 0x0, 0x0, @u32}, @generic="074914464ec4852bbe91bcf24a20c5947588902c7a6905236d4dc642976168fde4240f566808a309ae44166dd9ddd54a3d5a56fb98836a", @generic="f8e1485374172b4a8b649780e1ca6588eaffd78023211fdcaf7dbd6f18a26e3e574b9e8aa0e335c18ada43e5d6784240551fd0e1472390997cc7757c27858f770f5356a88c5d65c24ccd8fe002dd8f995bf58ce4b84e1ec6f2f39bad2cad3b77eac746f941b0abbd10dcf912dc91373e13b200b1a7479ee779fa39b02fa452e425addd719ca0017919a02266537db3a6e614794f273a08e1ce201b10da11285ea6aa6547f5a4a60b5c6eb6a4eb280a19f5cc028efd0f54f7593a33", @generic="1b172e2a8500ad603d95cc1cbbf333f10f9d3128ce1ca9d1617f910bec8b9279b562a85d66e348b1dc25a320508ed10428a793e7105128b80543888819"]}, @typed={0x8, 0xb, 0x0, 0x0, @u32=0x9}, @generic="7a9d749a0e9f5ed4429330ae4f39068eea1e8aec010b62affa891575b0892925ce8cf6104938a6e50923e8e79ee109c5b2696956377664ea0944f37dd9d001721e5b50dde00116454282bd2d90c7e68e7c0e362f04f951ea0cf80b49e260d573289e2b0f1719ef1ec0a4245a172f5dbced948634cd54fdaaf9721695a941dfac93d7eb5d78b747bfc802e053338c4dd4bb6993e6deba7c373d73a4abed91701b09378bafb1dad8475f5ca33a8ebce4a5f827b60125a1ef31d4fa387c36dc1447d2a5dbbe3196026de51b082e90c6de7f1690c66c570167acc84f860fe52f8f907dce789216db05e94f21", @generic="3e45b44e8a6e2ef5f7b0c2927a21c821f419e12d6f8db500dfe5a44fcff0c12c05ee9f9047d57be423e6ac98c7bfef400c2c51aeafb3ff749237dc1900ac83c376ccc187368a", @generic="8f0eeead2d962bb54fe3a387b3a7b08e72fc6e734b1f38d2b24ac692727b276b65aec6234d22b67bc7be0fa02f560cb4760f59249a798739ab74fdc98260d1a1f43204971c679b6d4f2e9e35b816ce491c722721f7a50cb9", @generic="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"]}, 0x152c}, {&(0x7f0000000180)={0xf8, 0x33, 0x1, 0x70bd29, 0x25dfdbff, "", [@typed={0x8, 0x2d, 0x0, 0x0, @uid=0xee00}, @generic="efa374f609f4adec778f064458829da499df91e2c7b9222a0e7e9928d01170c14657c8491ee128498b0e9627135764e5d2cd442cf7104fee3260a2f5ceb26d5359d2d33da8f467d5e5f1f0b02d923d1ec6c49cdd924c21decdb72ac530be9396e4a80d6141d7d41618222850be8c36328e8fb9a4", @generic="b026f6bffcd4b26d6e288b79cd67001ed76d32d0dc5ba6ffd9838a71b47bc6b214c3ce90ae7104540c5dbe0908136806c38981693447508c982c327e66870fc6e8e6c44b3a354557b3fa26e938a3cd921aff91b1fa21e0ae62069f92f23e177a0450f5e8", @typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@broadcast}]}, 0xf8}], 0x2, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0xc0, 0x4080}, 0x10) 09:12:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xfdfdffff}) 09:12:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 34) 09:12:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000ebbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:12:28 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0), 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:12:28 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xe0ff7f00000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:12:28 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000004b627ee3f63a1000010000005956000000960000090005000000000000000500"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x2, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x4044840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x9b18856f6a043c3b}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1524.274105] FAULT_INJECTION: forcing a failure. 09:12:28 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x1260, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1524.274105] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.276776] CPU: 1 PID: 9519 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1524.278329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1524.280197] Call Trace: [ 1524.280801] dump_stack+0x107/0x167 [ 1524.281633] should_fail.cold+0x5/0xa [ 1524.282500] ? create_object.isra.0+0x3a/0xa20 [ 1524.283531] should_failslab+0x5/0x20 [ 1524.284387] kmem_cache_alloc+0x5b/0x310 [ 1524.285338] create_object.isra.0+0x3a/0xa20 [ 1524.286340] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1524.287494] kmem_cache_alloc+0x159/0x310 [ 1524.288449] __kernfs_new_node+0xd4/0x860 [ 1524.289397] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1524.290612] ? kernfs_add_one+0x36e/0x4d0 [ 1524.291662] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1524.292757] ? wait_for_completion_io+0x270/0x270 [ 1524.293837] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1524.295012] kernfs_new_node+0x18d/0x250 [ 1524.295935] __kernfs_create_file+0x51/0x350 [ 1524.296929] sysfs_add_file_mode_ns+0x221/0x560 [ 1524.297991] internal_create_group+0x324/0xb30 [ 1524.299025] ? sysfs_remove_group+0x170/0x170 [ 1524.300045] ? lockdep_init_map_type+0x2c7/0x780 [ 1524.301122] ? blk_queue_flag_set+0x22/0x30 [ 1524.302094] ? __loop_update_dio+0x2d2/0x690 [ 1524.303082] loop_configure+0x953/0x1410 [ 1524.304014] lo_ioctl+0xa57/0x16b0 [ 1524.304826] ? avc_has_extended_perms+0x7f1/0xf40 [ 1524.305912] ? loop_set_status_old+0x250/0x250 [ 1524.306939] ? avc_ss_reset+0x180/0x180 [ 1524.307841] ? find_held_lock+0x2c/0x110 [ 1524.308774] ? __lock_acquire+0xbb1/0x5b00 [ 1524.309783] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1524.310957] ? generic_block_fiemap+0x60/0x60 [ 1524.311970] ? lock_downgrade+0x6d0/0x6d0 [ 1524.312916] ? build_open_flags+0x6f0/0x6f0 [ 1524.313885] ? loop_set_status_old+0x250/0x250 [ 1524.314902] blkdev_ioctl+0x291/0x710 [ 1524.315759] ? blkdev_common_ioctl+0x1930/0x1930 [ 1524.316839] ? selinux_file_ioctl+0xb6/0x270 [ 1524.317829] block_ioctl+0xf9/0x140 [ 1524.318649] ? blkdev_read_iter+0x1c0/0x1c0 [ 1524.319643] __x64_sys_ioctl+0x19a/0x210 [ 1524.320571] do_syscall_64+0x33/0x40 [ 1524.321410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1524.322571] RIP: 0033:0x7ffb8254e8d7 [ 1524.323414] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1524.327549] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1524.329267] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1524.330869] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1524.332485] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1524.334097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1524.335710] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1524.347191] loop0: detected capacity change from 0 to 2048 [ 1524.358537] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1524.359617] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:12:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, 0x0, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:12:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xffefffff}) [ 1524.449375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25163 sclass=netlink_route_socket pid=9537 comm=syz-executor.3 [ 1524.494684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.495520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.496424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1524.498104] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1524.533396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25163 sclass=netlink_route_socket pid=9542 comm=syz-executor.3 09:12:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, 0x0, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:12:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, 0x0, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:12:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000fffffff5bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:12:41 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0), 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:12:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 35) 09:12:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xffffefff}) 09:12:41 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x1263, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:12:41 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xe0ffff00000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1537.561716] kauditd_printk_skb: 17 callbacks suppressed [ 1537.561738] audit: type=1326 audit(1749460361.352:2110): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9549 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1537.583638] audit: type=1326 audit(1749460361.352:2111): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9549 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1537.608788] audit: type=1326 audit(1749460361.354:2112): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9549 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:12:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000fffffffbbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1537.636786] audit: type=1326 audit(1749460361.355:2113): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9549 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1537.640313] FAULT_INJECTION: forcing a failure. [ 1537.640313] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.641674] CPU: 1 PID: 9564 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1537.642485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1537.643463] Call Trace: [ 1537.643780] dump_stack+0x107/0x167 [ 1537.644217] should_fail.cold+0x5/0xa [ 1537.644671] ? __kernfs_new_node+0xd4/0x860 [ 1537.645170] should_failslab+0x5/0x20 [ 1537.645613] kmem_cache_alloc+0x5b/0x310 [ 1537.646083] __kernfs_new_node+0xd4/0x860 [ 1537.646565] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1537.647103] ? kernfs_add_one+0x36e/0x4d0 [ 1537.647584] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1537.648139] ? wait_for_completion_io+0x270/0x270 [ 1537.648700] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1537.649304] kernfs_new_node+0x18d/0x250 [ 1537.649775] __kernfs_create_file+0x51/0x350 [ 1537.650292] sysfs_add_file_mode_ns+0x221/0x560 [ 1537.650830] internal_create_group+0x324/0xb30 [ 1537.651361] ? sysfs_remove_group+0x170/0x170 [ 1537.651878] ? lockdep_init_map_type+0x2c7/0x780 [ 1537.652431] ? blk_queue_flag_set+0x22/0x30 [ 1537.652934] ? __loop_update_dio+0x2d2/0x690 [ 1537.653443] loop_configure+0x953/0x1410 [ 1537.653923] lo_ioctl+0xa57/0x16b0 [ 1537.654333] ? avc_has_extended_perms+0x7f1/0xf40 [ 1537.654884] ? loop_set_status_old+0x250/0x250 [ 1537.655411] ? avc_ss_reset+0x180/0x180 [ 1537.655871] ? find_held_lock+0x2c/0x110 [ 1537.656342] ? __lock_acquire+0xbb1/0x5b00 [ 1537.656867] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1537.657465] ? generic_block_fiemap+0x60/0x60 [ 1537.657975] ? lock_downgrade+0x6d0/0x6d0 [ 1537.658452] ? build_open_flags+0x6f0/0x6f0 [ 1537.658951] ? loop_set_status_old+0x250/0x250 [ 1537.659475] blkdev_ioctl+0x291/0x710 [ 1537.659911] ? blkdev_common_ioctl+0x1930/0x1930 [ 1537.660459] ? selinux_file_ioctl+0xb6/0x270 [ 1537.660972] block_ioctl+0xf9/0x140 [ 1537.661388] ? blkdev_read_iter+0x1c0/0x1c0 [ 1537.661884] __x64_sys_ioctl+0x19a/0x210 [ 1537.662353] do_syscall_64+0x33/0x40 [ 1537.662779] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1537.663368] RIP: 0033:0x7ffb8254e8d7 [ 1537.663792] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1537.665908] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1537.666778] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1537.667596] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1537.668411] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1537.669230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1537.670044] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 09:12:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, 0x0, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1537.684995] loop0: detected capacity change from 0 to 2048 [ 1537.726739] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1537.737367] audit: type=1326 audit(1749460361.356:2114): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9549 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:12:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1537.757967] audit: type=1326 audit(1749460361.356:2115): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9549 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1537.761678] audit: type=1326 audit(1749460361.358:2116): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9549 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1537.766427] audit: type=1326 audit(1749460361.359:2117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9549 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1537.770960] audit: type=1326 audit(1749460361.359:2118): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9549 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1537.773538] audit: type=1326 audit(1749460361.361:2119): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9549 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:12:41 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0), 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:12:41 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xf0ff7f00000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:12:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xfffffdfd}) 09:12:41 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xf0ffffff7f0000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:12:41 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x1265, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:12:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000ffffffffbbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:12:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 36) 09:12:41 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x100000000000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:12:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000002000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1537.980245] FAULT_INJECTION: forcing a failure. [ 1537.980245] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.982808] CPU: 0 PID: 9596 Comm: syz-executor.0 Not tainted 5.10.238 #1 09:12:41 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x1269, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1537.984346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 09:12:41 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1537.986342] Call Trace: [ 1537.986995] dump_stack+0x107/0x167 [ 1537.987821] should_fail.cold+0x5/0xa [ 1537.988691] ? create_object.isra.0+0x3a/0xa20 [ 1537.989719] should_failslab+0x5/0x20 [ 1537.990576] kmem_cache_alloc+0x5b/0x310 [ 1537.991496] create_object.isra.0+0x3a/0xa20 [ 1537.992476] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1537.993617] kmem_cache_alloc+0x159/0x310 [ 1537.994565] __kernfs_new_node+0xd4/0x860 [ 1537.995505] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1537.996570] ? kernfs_add_one+0x36e/0x4d0 [ 1537.997514] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1537.998600] ? wait_for_completion_io+0x270/0x270 [ 1537.999685] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1538.000882] kernfs_new_node+0x18d/0x250 [ 1538.001801] __kernfs_create_file+0x51/0x350 [ 1538.002806] sysfs_add_file_mode_ns+0x221/0x560 [ 1538.003876] internal_create_group+0x324/0xb30 [ 1538.004935] ? sysfs_remove_group+0x170/0x170 [ 1538.005967] ? lockdep_init_map_type+0x2c7/0x780 [ 1538.007036] ? blk_queue_flag_set+0x22/0x30 [ 1538.008003] ? __loop_update_dio+0x2d2/0x690 [ 1538.009004] loop_configure+0x953/0x1410 [ 1538.009929] lo_ioctl+0xa57/0x16b0 [ 1538.010734] ? avc_has_extended_perms+0x7f1/0xf40 [ 1538.011831] ? loop_set_status_old+0x250/0x250 [ 1538.012881] ? avc_ss_reset+0x180/0x180 [ 1538.013783] ? find_held_lock+0x2c/0x110 [ 1538.014720] ? __lock_acquire+0xbb1/0x5b00 [ 1538.015737] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1538.016926] ? generic_block_fiemap+0x60/0x60 [ 1538.017948] ? lock_downgrade+0x6d0/0x6d0 [ 1538.018881] ? build_open_flags+0x6f0/0x6f0 [ 1538.019866] ? loop_set_status_old+0x250/0x250 [ 1538.020901] blkdev_ioctl+0x291/0x710 [ 1538.021764] ? blkdev_common_ioctl+0x1930/0x1930 [ 1538.022839] ? selinux_file_ioctl+0xb6/0x270 [ 1538.023838] block_ioctl+0xf9/0x140 [ 1538.024673] ? blkdev_read_iter+0x1c0/0x1c0 [ 1538.025650] __x64_sys_ioctl+0x19a/0x210 [ 1538.026578] do_syscall_64+0x33/0x40 [ 1538.027422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1538.028582] RIP: 0033:0x7ffb8254e8d7 [ 1538.029422] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.033573] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1538.035285] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1538.036892] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1538.038490] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1538.040104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1538.041719] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1538.046355] loop0: detected capacity change from 0 to 2048 [ 1538.098278] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1538.124070] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1538.125275] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:12:56 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:12:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x480100, 0x148) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(r1, 0x5450) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x80) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/73, 0x49}], 0x1, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}, 0x2) fcntl$setownex(r3, 0xf, &(0x7f0000000300)={0x1}) 09:12:56 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:12:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000003000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:12:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:12:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xfffffff5}) 09:12:56 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x200000000000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:12:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 37) [ 1553.148899] FAULT_INJECTION: forcing a failure. [ 1553.148899] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.151438] CPU: 1 PID: 9623 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1553.152881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1553.154632] Call Trace: [ 1553.155252] dump_stack+0x107/0x167 [ 1553.156105] should_fail.cold+0x5/0xa [ 1553.156963] ? __kernfs_new_node+0xd4/0x860 [ 1553.157925] should_failslab+0x5/0x20 [ 1553.158817] kmem_cache_alloc+0x5b/0x310 [ 1553.159738] __kernfs_new_node+0xd4/0x860 [ 1553.160630] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1553.161734] ? kernfs_add_one+0x36e/0x4d0 [ 1553.162704] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1553.163821] ? wait_for_completion_io+0x270/0x270 [ 1553.164945] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1553.166163] kernfs_new_node+0x18d/0x250 [ 1553.167113] __kernfs_create_file+0x51/0x350 [ 1553.168140] sysfs_add_file_mode_ns+0x221/0x560 [ 1553.169241] internal_create_group+0x324/0xb30 [ 1553.170308] ? sysfs_remove_group+0x170/0x170 [ 1553.171374] ? lockdep_init_map_type+0x2c7/0x780 [ 1553.172483] ? blk_queue_flag_set+0x22/0x30 [ 1553.173496] ? __loop_update_dio+0x2d2/0x690 [ 1553.174526] loop_configure+0x953/0x1410 [ 1553.175484] lo_ioctl+0xa57/0x16b0 [ 1553.176314] ? avc_has_extended_perms+0x7f1/0xf40 [ 1553.177448] ? loop_set_status_old+0x250/0x250 [ 1553.178523] ? avc_ss_reset+0x180/0x180 [ 1553.179452] ? find_held_lock+0x2c/0x110 [ 1553.180412] ? __lock_acquire+0xbb1/0x5b00 [ 1553.181467] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1553.182687] ? generic_block_fiemap+0x60/0x60 [ 1553.183729] ? lock_downgrade+0x6d0/0x6d0 [ 1553.184703] ? build_open_flags+0x6f0/0x6f0 [ 1553.185718] ? loop_set_status_old+0x250/0x250 [ 1553.186779] blkdev_ioctl+0x291/0x710 [ 1553.187668] ? blkdev_common_ioctl+0x1930/0x1930 [ 1553.188782] ? selinux_file_ioctl+0xb6/0x270 [ 1553.189813] block_ioctl+0xf9/0x140 [ 1553.190654] ? blkdev_read_iter+0x1c0/0x1c0 [ 1553.191654] __x64_sys_ioctl+0x19a/0x210 [ 1553.192603] do_syscall_64+0x33/0x40 [ 1553.193476] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1553.194661] RIP: 0033:0x7ffb8254e8d7 [ 1553.195523] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1553.199780] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1553.201577] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1553.203577] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1553.205478] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1553.207166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1553.208923] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1553.219687] loop0: detected capacity change from 0 to 2048 [ 1553.266275] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1553.287396] kauditd_printk_skb: 33 callbacks suppressed [ 1553.287445] audit: type=1326 audit(1749460377.078:2153): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9626 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1553.295479] audit: type=1326 audit(1749460377.078:2154): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9626 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1553.315454] audit: type=1326 audit(1749460377.104:2155): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9626 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1553.325526] audit: type=1326 audit(1749460377.104:2156): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9626 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1553.349689] audit: type=1326 audit(1749460377.104:2157): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9626 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1553.403942] audit: type=1326 audit(1749460377.105:2158): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9626 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1553.413269] audit: type=1326 audit(1749460377.105:2159): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9626 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1553.423065] audit: type=1326 audit(1749460377.105:2160): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9626 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1553.440555] audit: type=1326 audit(1749460377.123:2161): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9626 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1553.454142] audit: type=1326 audit(1749460377.124:2162): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9626 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:13:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x400000000000}) 09:13:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000009000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:13:11 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x300000000000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:13:11 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000180)={0x3fe}, 0x10) fork() modify_ldt$write2(0x11, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x400, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) set_thread_area(&(0x7f0000000040)={0xfffffffd, 0x20000800, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) 09:13:11 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x1275, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:13:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 38) 09:13:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:13:11 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1567.332664] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1567.334960] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1567.390475] FAULT_INJECTION: forcing a failure. [ 1567.390475] name failslab, interval 1, probability 0, space 0, times 0 [ 1567.393151] CPU: 0 PID: 9660 Comm: syz-executor.0 Not tainted 5.10.238 #1 09:13:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000d000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1567.394688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1567.396748] Call Trace: [ 1567.397376] dump_stack+0x107/0x167 [ 1567.398221] should_fail.cold+0x5/0xa [ 1567.399101] ? create_object.isra.0+0x3a/0xa20 [ 1567.400155] should_failslab+0x5/0x20 [ 1567.401042] kmem_cache_alloc+0x5b/0x310 [ 1567.401986] create_object.isra.0+0x3a/0xa20 [ 1567.402994] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1567.404148] kmem_cache_alloc+0x159/0x310 [ 1567.405102] __kernfs_new_node+0xd4/0x860 [ 1567.406041] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1567.407101] ? kernfs_add_one+0x36e/0x4d0 [ 1567.408042] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1567.409140] ? wait_for_completion_io+0x270/0x270 [ 1567.410253] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1567.411449] kernfs_new_node+0x18d/0x250 [ 1567.412391] __kernfs_create_file+0x51/0x350 [ 1567.413430] sysfs_add_file_mode_ns+0x221/0x560 [ 1567.414512] internal_create_group+0x324/0xb30 [ 1567.415554] ? sysfs_remove_group+0x170/0x170 [ 1567.416579] ? lockdep_init_map_type+0x2c7/0x780 [ 1567.417690] ? blk_queue_flag_set+0x22/0x30 [ 1567.418669] ? __loop_update_dio+0x2d2/0x690 [ 1567.419667] loop_configure+0x953/0x1410 [ 1567.420608] lo_ioctl+0xa57/0x16b0 [ 1567.421438] ? avc_has_extended_perms+0x7f1/0xf40 [ 1567.422543] ? loop_set_status_old+0x250/0x250 [ 1567.423598] ? avc_ss_reset+0x180/0x180 [ 1567.424514] ? find_held_lock+0x2c/0x110 [ 1567.425477] ? __lock_acquire+0xbb1/0x5b00 [ 1567.426509] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1567.427718] ? generic_block_fiemap+0x60/0x60 [ 1567.428747] ? lock_downgrade+0x6d0/0x6d0 [ 1567.429698] ? build_open_flags+0x6f0/0x6f0 [ 1567.430672] ? loop_set_status_old+0x250/0x250 [ 1567.431696] blkdev_ioctl+0x291/0x710 [ 1567.432555] ? blkdev_common_ioctl+0x1930/0x1930 [ 1567.433658] ? selinux_file_ioctl+0xb6/0x270 [ 1567.434677] block_ioctl+0xf9/0x140 [ 1567.435514] ? blkdev_read_iter+0x1c0/0x1c0 [ 1567.436488] __x64_sys_ioctl+0x19a/0x210 [ 1567.437415] do_syscall_64+0x33/0x40 [ 1567.438276] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1567.439461] RIP: 0033:0x7ffb8254e8d7 [ 1567.440322] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1567.444563] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1567.446336] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1567.447985] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1567.449606] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1567.451256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1567.452889] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1567.461633] kauditd_printk_skb: 6 callbacks suppressed [ 1567.461652] audit: type=1326 audit(1749460391.252:2169): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9655 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1567.479108] audit: type=1326 audit(1749460391.259:2170): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9655 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1567.495790] audit: type=1326 audit(1749460391.275:2171): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9655 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1567.514035] audit: type=1326 audit(1749460391.276:2172): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9655 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1567.519685] loop0: detected capacity change from 0 to 2048 09:13:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x1000000000000}) 09:13:11 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0x6112000000000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1567.556883] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1567.559155] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1567.567008] audit: type=1326 audit(1749460391.276:2173): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9655 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:13:11 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0030000", @ANYRES16=r0, @ANYBLOB="000228bd7000ffdbdf2587002c2c08000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c0}, 0x1, 0x0, 0x0, 0x80044}, 0x40) [ 1567.594043] audit: type=1326 audit(1749460391.276:2174): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9655 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1567.616478] audit: type=1326 audit(1749460391.276:2175): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9655 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1567.639443] audit: type=1326 audit(1749460391.285:2176): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9655 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:13:11 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x1276, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:13:11 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:13:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000e000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1567.661388] audit: type=1326 audit(1749460391.285:2177): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9655 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:13:11 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xa40f000000000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1567.679521] audit: type=1326 audit(1749460391.285:2178): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9655 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04e1733a04 code=0x7ffc0000 [ 1567.736225] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1567.776804] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1567.779058] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:13:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xa000000000000}) 09:13:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780), 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1580.783928] kauditd_printk_skb: 17 callbacks suppressed [ 1580.783941] audit: type=1326 audit(1749460404.574:2196): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9708 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1580.790530] audit: type=1326 audit(1749460404.581:2197): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9708 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1580.796102] audit: type=1326 audit(1749460404.586:2198): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9708 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:13:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780), 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:13:24 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0030000", @ANYRES16=r0, @ANYBLOB="000228bd7000ffdbdf2587002c2c08000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c0}, 0x1, 0x0, 0x0, 0x80044}, 0x40) 09:13:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x100000000000000}) 09:13:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 39) 09:13:24 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0, 0xffffffff00000000}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:13:24 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000030000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:13:24 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:13:24 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x4b47, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1580.814416] audit: type=1326 audit(1749460404.586:2199): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9708 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1580.821005] audit: type=1326 audit(1749460404.596:2200): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9708 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1580.826009] audit: type=1326 audit(1749460404.596:2201): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9708 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1580.832744] audit: type=1326 audit(1749460404.597:2202): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9708 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1580.838081] audit: type=1326 audit(1749460404.597:2203): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9708 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1580.850066] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1580.851504] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:13:24 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x4b49, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1580.870857] FAULT_INJECTION: forcing a failure. [ 1580.870857] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.872637] CPU: 0 PID: 9722 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1580.873719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1580.874916] Call Trace: [ 1580.875299] dump_stack+0x107/0x167 [ 1580.875826] should_fail.cold+0x5/0xa [ 1580.876381] ? __kernfs_new_node+0xd4/0x860 [ 1580.877016] should_failslab+0x5/0x20 [ 1580.877567] kmem_cache_alloc+0x5b/0x310 [ 1580.878157] __kernfs_new_node+0xd4/0x860 [ 1580.878759] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1580.879436] ? kernfs_add_one+0x36e/0x4d0 [ 1580.880036] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1580.880735] ? wait_for_completion_io+0x270/0x270 [ 1580.881438] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1580.882203] kernfs_new_node+0x18d/0x250 [ 1580.882791] __kernfs_create_file+0x51/0x350 [ 1580.883436] sysfs_add_file_mode_ns+0x221/0x560 [ 1580.884001] audit: type=1326 audit(1749460404.601:2204): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9708 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1580.884124] internal_create_group+0x324/0xb30 [ 1580.884144] ? sysfs_remove_group+0x170/0x170 [ 1580.884168] ? lockdep_init_map_type+0x2c7/0x780 [ 1580.891871] ? blk_queue_flag_set+0x22/0x30 [ 1580.892490] ? __loop_update_dio+0x2d2/0x690 [ 1580.893136] loop_configure+0x953/0x1410 09:13:24 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1580.893737] lo_ioctl+0xa57/0x16b0 [ 1580.894402] ? avc_has_extended_perms+0x7f1/0xf40 [ 1580.894668] audit: type=1326 audit(1749460404.601:2205): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9708 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1580.895072] ? loop_set_status_old+0x250/0x250 [ 1580.895098] ? avc_ss_reset+0x180/0x180 [ 1580.901168] ? find_held_lock+0x2c/0x110 [ 1580.901742] ? __lock_acquire+0xbb1/0x5b00 [ 1580.902364] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1580.903094] ? generic_block_fiemap+0x60/0x60 [ 1580.903717] ? lock_downgrade+0x6d0/0x6d0 [ 1580.904293] ? build_open_flags+0x6f0/0x6f0 [ 1580.904895] ? loop_set_status_old+0x250/0x250 [ 1580.905532] blkdev_ioctl+0x291/0x710 [ 1580.906062] ? blkdev_common_ioctl+0x1930/0x1930 [ 1580.906724] ? selinux_file_ioctl+0xb6/0x270 [ 1580.907342] block_ioctl+0xf9/0x140 [ 1580.907843] ? blkdev_read_iter+0x1c0/0x1c0 [ 1580.908444] __x64_sys_ioctl+0x19a/0x210 [ 1580.909019] do_syscall_64+0x33/0x40 [ 1580.909537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1580.910248] RIP: 0033:0x7ffb8254e8d7 [ 1580.910773] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1580.913334] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1580.914392] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1580.915384] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1580.916386] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1580.917388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1580.918392] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 09:13:24 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000090000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:13:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x200000000000000}) 09:13:24 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0030000", @ANYRES16=r0, @ANYBLOB="000228bd7000ffdbdf2587002c2c08000300", @ANYRES32=0x0, @ANYBLOB="06004800300000000a000600080211000000000090032a008225043d089f000000080211000000d7d2ffff09000000080000000100ffffffffffff95e2000084dc940e40ffffffffffff050000000802110000001d0040080211000000aab5000008021100000007000008021100000102000000420000ffffffffffff04000000230000080211000000040000004301000802110000010700000016004008021100000005000000ffffffffffff0c000008021100000000000400280040ffffffffffff01000000ffffffffffff42000008021100000003000000270000ffffffffffffff01000015004008021100000001000000ffffffffffff27000008021100000006000000400040ffffffffffff0500000008021100000039007107ff01ffffff0308824606060402000000080211000001ff7fffff80ffffff020000000404ffffffffffff0400000001ffffffffffff0300000000ffffffffffff000000000508021100000007000000074fae19e8cfe0464ca639051a1b4bce572daae9a64d6e30a9b51ae0eb94c701daa0a90ef5f0b8f57e97c66d924d51b2d08baa116754bafcd24dc3c83d3a56abc71ad920ee225da7733f8006ff8ff522367516000040002f00727bf4f5ff390885d5ff658f8de8b56d26e308ffb61403b919c94824ed469ef02b736fcb2f1f8b7fd69e59181e169d52bd7a754fb4b7d7bb141571f05eb5b643d5e5e015432c095d435add4245ec16d1555bc55f2518b667f801119ca4dddc218003232545dc5dd9c4d9e10e57a79c1a9c4ec60a54b3c1fad2612b57bf4d03f0def6b1f3be09c4ca9ad1d3f6cbfd1bf428e60ac72145ec1891f3154566ea88287019136c8931e013a84beb236e5e0e0e8cf240e23bf17747be6199c1b55feb79db03795075f09cd8db5b9376d497add8882d433eda6cbdba6615537234ec10c7468a3ec7869e2dbfce331a3f36db2c02f2009b2ef337e6070797e9671a42b5b35c24cff8b883f68e61a08c7e1583f0ee3c76a24df98276d583035cf81cd540d0516c9c826889605f7fda3c1c0b04ce34a62f57731e98ba7b59035f56dd90b0a57b2937e8a2a94228d10321f4743d0322b8253e474705e866928421e49876cbe21714a9e77ab52e5bd010261c030ed16d30cc16c472e1c06e32d82ce2040b6d1ce10ae2154e1e7ca37e0104bf10d74501247609267d4e286cc3b9e21daeed80b94f7b5bd82d12bde4b4f636686a4fabaf791ad7a336021d0c1eb34817651ba24be9ecf60ced87c79d09938889bc7c1e3a6bf55e5701070d3df261ae3a0f"], 0x3c0}, 0x1, 0x0, 0x0, 0x80044}, 0x40) 09:13:24 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x2000038c}], 0x4) [ 1581.030290] loop0: detected capacity change from 0 to 2048 [ 1581.072521] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1581.074882] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1581.082120] EXT4-fs (loop0): Can't read superblock on 2nd try 09:13:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000d0000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:13:38 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:13:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x300000000000000}) 09:13:38 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x7fffe000}], 0x4) 09:13:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780), 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:13:38 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0030000", @ANYRES16=r0, @ANYBLOB="000228bd7000ffdbdf2587002c2c08000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c0}, 0x1, 0x0, 0x0, 0x80044}, 0x40) 09:13:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 40) 09:13:38 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x541b, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1594.617968] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1594.620232] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1594.626422] FAULT_INJECTION: forcing a failure. [ 1594.626422] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.629392] CPU: 1 PID: 9766 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1594.630984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1594.632905] Call Trace: [ 1594.633531] dump_stack+0x107/0x167 [ 1594.634377] should_fail.cold+0x5/0xa [ 1594.635267] ? create_object.isra.0+0x3a/0xa20 [ 1594.636331] should_failslab+0x5/0x20 [ 1594.637223] kmem_cache_alloc+0x5b/0x310 [ 1594.638172] create_object.isra.0+0x3a/0xa20 [ 1594.639189] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1594.640373] kmem_cache_alloc+0x159/0x310 [ 1594.641358] __kernfs_new_node+0xd4/0x860 [ 1594.642330] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1594.643421] ? kernfs_add_one+0x36e/0x4d0 [ 1594.644385] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1594.645518] ? wait_for_completion_io+0x270/0x270 [ 1594.646630] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1594.647848] kernfs_new_node+0x18d/0x250 [ 1594.648794] __kernfs_create_file+0x51/0x350 [ 1594.649834] sysfs_add_file_mode_ns+0x221/0x560 [ 1594.650922] internal_create_group+0x324/0xb30 [ 1594.651991] ? sysfs_remove_group+0x170/0x170 [ 1594.653052] ? lockdep_init_map_type+0x2c7/0x780 [ 1594.654161] ? blk_queue_flag_set+0x22/0x30 [ 1594.655156] ? __loop_update_dio+0x2d2/0x690 [ 1594.656181] loop_configure+0x953/0x1410 [ 1594.657151] lo_ioctl+0xa57/0x16b0 [ 1594.657976] ? avc_has_extended_perms+0x7f1/0xf40 [ 1594.659100] ? loop_set_status_old+0x250/0x250 [ 1594.660164] ? avc_ss_reset+0x180/0x180 [ 1594.661083] ? find_held_lock+0x2c/0x110 [ 1594.662050] ? __lock_acquire+0xbb1/0x5b00 [ 1594.663085] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1594.664301] ? generic_block_fiemap+0x60/0x60 [ 1594.665346] ? lock_downgrade+0x6d0/0x6d0 [ 1594.666300] ? build_open_flags+0x6f0/0x6f0 [ 1594.667305] ? loop_set_status_old+0x250/0x250 [ 1594.668358] blkdev_ioctl+0x291/0x710 [ 1594.669255] ? blkdev_common_ioctl+0x1930/0x1930 [ 1594.670362] ? selinux_file_ioctl+0xb6/0x270 [ 1594.671386] block_ioctl+0xf9/0x140 [ 1594.672228] ? blkdev_read_iter+0x1c0/0x1c0 [ 1594.673239] __x64_sys_ioctl+0x19a/0x210 [ 1594.674185] do_syscall_64+0x33/0x40 [ 1594.675050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1594.676244] RIP: 0033:0x7ffb8254e8d7 [ 1594.677124] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1594.681398] RSP: 002b:00007ffb7fac3f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1594.683158] RAX: ffffffffffffffda RBX: 00007ffb82598970 RCX: 00007ffb8254e8d7 [ 1594.684807] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1594.686473] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1594.688122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1594.689782] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1594.696699] loop0: detected capacity change from 0 to 2048 09:13:38 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x2) [ 1594.720987] kauditd_printk_skb: 20 callbacks suppressed [ 1594.721006] audit: type=1326 audit(1749460418.511:2226): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1594.728387] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1594.732091] audit: type=1326 audit(1749460418.512:2227): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:13:38 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:13:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000e0000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1594.772358] audit: type=1326 audit(1749460418.561:2228): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1594.777610] audit: type=1326 audit(1749460418.562:2229): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1594.807111] audit: type=1326 audit(1749460418.562:2230): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1594.809547] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1594.814347] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1594.855212] audit: type=1326 audit(1749460418.562:2231): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:13:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000001000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:13:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) (fail_nth: 41) [ 1594.890072] audit: type=1326 audit(1749460418.562:2232): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:13:38 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1594.934133] audit: type=1326 audit(1749460418.575:2233): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:13:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x400000000000000}) 09:13:38 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:13:38 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x3) [ 1594.956839] audit: type=1326 audit(1749460418.575:2234): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1594.991192] audit: type=1326 audit(1749460418.575:2235): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9752 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04e1733a04 code=0x7ffc0000 09:13:38 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x5421, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:13:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:13:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:13:53 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000002000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:13:53 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x5450, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:13:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x800000000000000}) 09:13:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:13:53 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:13:53 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x8) 09:13:53 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1610.190743] loop0: detected capacity change from 0 to 2048 [ 1610.195279] kauditd_printk_skb: 16 callbacks suppressed [ 1610.195289] audit: type=1326 audit(1749460433.983:2252): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1610.202048] audit: type=1326 audit(1749460433.987:2253): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:13:54 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x50) [ 1610.225110] audit: type=1326 audit(1749460434.015:2254): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1610.230157] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1610.235199] audit: type=1326 audit(1749460434.016:2255): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1610.238749] audit: type=1326 audit(1749460434.016:2256): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:13:54 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) [ 1610.245629] audit: type=1326 audit(1749460434.026:2257): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:13:54 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x5451, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1610.298094] audit: type=1326 audit(1749460434.026:2258): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1610.305112] audit: type=1326 audit(1749460434.026:2259): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1610.313542] audit: type=1326 audit(1749460434.026:2260): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:13:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:13:54 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000003000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:13:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x900000000000000}) [ 1610.348379] audit: type=1326 audit(1749460434.026:2261): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:13:54 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:13:54 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:14:10 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) syz_open_dev$vcsa(&(0x7f0000000200), 0x0, 0x1000) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x62100) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:14:10 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:14:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xd00000000000000}) 09:14:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1626.934371] loop0: detected capacity change from 0 to 2048 [ 1626.946285] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1626.963806] loop0: detected capacity change from 0 to 2048 [ 1626.969325] EXT4-fs (loop0): Can't read superblock on 2nd try 09:14:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:14:10 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000009000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:14:10 executing program 3: rseq(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:14:10 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x5452, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1626.996577] kauditd_printk_skb: 19 callbacks suppressed [ 1626.996598] audit: type=1326 audit(1749460450.787:2281): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9856 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1627.003641] audit: type=1326 audit(1749460450.787:2282): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9856 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1627.031217] audit: type=1326 audit(1749460450.821:2283): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9856 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1627.038663] audit: type=1326 audit(1749460450.822:2284): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9856 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1627.047762] audit: type=1326 audit(1749460450.822:2285): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9856 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:14:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1627.083014] audit: type=1326 audit(1749460450.838:2286): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9856 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1627.108982] audit: type=1326 audit(1749460450.838:2287): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9856 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:14:10 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x5460, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1627.130668] audit: type=1326 audit(1749460450.848:2288): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9856 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:14:10 executing program 3: rseq(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) [ 1627.149454] audit: type=1326 audit(1749460450.848:2289): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9856 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1627.162197] loop0: detected capacity change from 0 to 2048 [ 1627.171264] audit: type=1326 audit(1749460450.848:2290): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9856 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1627.180690] EXT4-fs (loop0): Can't read superblock on 2nd try 09:14:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:14:10 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) get_robust_list(0xffffffffffffffff, &(0x7f0000000480)=&(0x7f0000000440)={&(0x7f0000000280)={&(0x7f0000000200)}, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)}}, &(0x7f00000004c0)=0x18) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:14:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xe00000000000000}) 09:14:10 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000d000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:14:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000e000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:14:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:14:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xf00000000000000}) 09:14:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:14:25 executing program 3: rseq(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:14:25 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x2, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:14:25 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x40049409, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:14:25 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1641.404202] loop0: detected capacity change from 0 to 2048 09:14:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000ffffff0f000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1641.430456] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1641.458112] kauditd_printk_skb: 6 callbacks suppressed [ 1641.458122] audit: type=1326 audit(1749460465.248:2297): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1641.461600] loop0: detected capacity change from 0 to 2048 [ 1641.468757] audit: type=1326 audit(1749460465.249:2298): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1641.471593] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1641.472642] audit: type=1326 audit(1749460465.259:2299): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:14:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x1000000000000000}) [ 1641.481309] audit: type=1326 audit(1749460465.263:2300): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1641.484702] audit: type=1326 audit(1749460465.263:2301): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1641.501138] audit: type=1326 audit(1749460465.279:2302): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1641.506773] audit: type=1326 audit(1749460465.279:2303): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:14:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1641.511700] audit: type=1326 audit(1749460465.280:2304): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1641.514739] audit: type=1326 audit(1749460465.280:2305): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:14:25 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 1641.519225] audit: type=1326 audit(1749460465.280:2306): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:14:25 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x40081271, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:14:25 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f0000000200)}, 0x5}, 0x18) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14, 0x40000) readv(r1, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:14:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000fffffff5000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1641.603850] loop0: detected capacity change from 0 to 2048 [ 1641.659178] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1641.717450] loop0: detected capacity change from 0 to 2048 [ 1641.725231] EXT4-fs (loop0): Can't read superblock on 2nd try 09:14:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x2000000000000000}) 09:14:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:14:38 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x6, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40086607, &(0x7f0000000080)) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x53, 0x4, 0x5, 0x0, 0x7, 0xc1085, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x4}, 0x10200, 0x9, 0x0, 0x4, 0x2, 0x1ff, 0x7fff, 0x0, 0x2, 0x0, 0x1ff}, 0x0, 0x0, r2, 0x0) 09:14:38 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x40086602, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:14:38 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:14:38 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 09:14:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:14:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000fffffff000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1654.485414] loop0: detected capacity change from 0 to 2048 [ 1654.517232] EXT4-fs (loop0): Can't read superblock on 2nd try 09:14:38 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 1654.551679] kauditd_printk_skb: 6 callbacks suppressed [ 1654.551700] audit: type=1326 audit(1749460478.342:2313): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9963 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1654.575495] audit: type=1326 audit(1749460478.354:2314): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9963 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1654.609618] loop0: detected capacity change from 0 to 2048 09:14:38 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x40087602, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1654.626404] audit: type=1326 audit(1749460478.375:2315): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9963 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1654.649883] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1654.659602] audit: type=1326 audit(1749460478.375:2316): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9963 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1654.669490] audit: type=1326 audit(1749460478.395:2317): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9963 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1654.675594] audit: type=1326 audit(1749460478.414:2318): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9963 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1654.680777] audit: type=1326 audit(1749460478.414:2319): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9963 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1654.686131] audit: type=1326 audit(1749460478.414:2320): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9963 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1654.691560] audit: type=1326 audit(1749460478.415:2321): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9963 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1654.696208] audit: type=1326 audit(1749460478.415:2322): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9963 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:14:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f5ffffff000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:14:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x3028000000000000}) 09:14:38 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x40801, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x71c7, 0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2a4}, r3, 0x10, r2, 0x2) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x2, 0x9, 0x1, 0x3f, 0x0, 0x9a, 0x20, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x44089, 0x0, 0x200, 0x8, 0x4, 0xd6, 0x1, 0x0, 0x5, 0x0, 0x164a}, 0x0, 0x8, r2, 0xb) [ 1654.853450] loop0: detected capacity change from 0 to 2048 [ 1654.865307] EXT4-fs (loop0): Can't read superblock on 2nd try 09:14:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:14:38 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:14:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:14:38 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x4020940d, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1654.905106] loop0: detected capacity change from 0 to 2048 [ 1654.933827] EXT4-fs (loop0): Can't read superblock on 2nd try 09:14:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:14:55 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000020000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:14:55 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:14:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x3828000000000000}) 09:14:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:14:55 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x80081270, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:14:55 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) syz_open_dev$vcsa(&(0x7f0000000280), 0x80000000, 0x100) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x4, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000200)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:14:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1671.759773] kauditd_printk_skb: 17 callbacks suppressed [ 1671.759790] audit: type=1326 audit(1749460495.550:2340): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10010 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1671.759808] loop0: detected capacity change from 0 to 2048 [ 1671.768506] audit: type=1326 audit(1749460495.550:2341): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10010 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1671.800270] audit: type=1326 audit(1749460495.586:2342): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10010 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1671.804730] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1671.804791] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1671.811208] audit: type=1326 audit(1749460495.586:2343): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10010 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:14:55 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:14:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1671.811299] audit: type=1326 audit(1749460495.587:2344): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10010 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1671.811383] audit: type=1326 audit(1749460495.587:2345): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10010 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1671.811463] audit: type=1326 audit(1749460495.587:2346): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10010 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:14:55 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000030000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:14:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x4000000000000000}) [ 1671.811545] audit: type=1326 audit(1749460495.599:2347): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10010 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1671.811623] audit: type=1326 audit(1749460495.599:2348): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10010 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:14:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1671.811735] audit: type=1326 audit(1749460495.600:2349): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10010 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1671.813739] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1672.016843] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1672.019179] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1672.059594] loop0: detected capacity change from 0 to 2048 09:14:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x4028000000000000}) 09:14:55 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000140)}, 0x0, &(0x7f0000000180)={&(0x7f0000000100)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x10d5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000280)='/dev/vcsa#\x00') r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x3f7, 0x200, 0x70bd2a, 0x25dfdbfd, {0x7, 0x7, './file1', './file1'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4048080) readv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1672.101844] EXT4-fs (loop0): Can't read superblock on 2nd try 09:14:55 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x80081272, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:14:55 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000090000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:14:55 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:14:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:14:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1672.259024] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1672.260504] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1672.277236] loop0: detected capacity change from 0 to 2048 [ 1672.326525] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1672.343581] loop0: detected capacity change from 0 to 2048 [ 1672.348024] EXT4-fs (loop0): Can't read superblock on 2nd try 09:15:11 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 1) 09:15:11 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x80086601, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:15:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:15:11 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:15:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:15:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x4828000000000000}) 09:15:11 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = dup3(r0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0), 0x5, 0x400) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x7, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1) dup3(r3, r2, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x5, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}}, 0x108) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000200)={0xb36f, 0x4, 0xb5, 0x7, 0x9}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000580)={0x6, &(0x7f0000000540)=[{0x8001, 0x1, 0x3, 0xffff}, {0x8001, 0x1f, 0x6, 0x6}, {0x1, 0xdb, 0x3f, 0x4}, {0xab9, 0x49, 0x1f, 0x5}, {0x4, 0xff, 0x0, 0x7}, {0x8, 0x3, 0x8, 0xffff0000}]}, 0x10) readv(r4, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:15:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000d0000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1687.341520] FAULT_INJECTION: forcing a failure. [ 1687.341520] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.343198] CPU: 0 PID: 10080 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1687.344202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1687.345408] Call Trace: [ 1687.345798] dump_stack+0x107/0x167 [ 1687.346343] should_fail.cold+0x5/0xa [ 1687.346901] ? sock_alloc_inode+0x18/0x1c0 [ 1687.347526] should_failslab+0x5/0x20 [ 1687.348083] kmem_cache_alloc+0x5b/0x310 [ 1687.348676] ? selinux_ipv6_output+0x180/0x180 [ 1687.349340] ? sock_free_inode+0x20/0x20 [ 1687.349931] sock_alloc_inode+0x18/0x1c0 [ 1687.350535] ? sock_free_inode+0x20/0x20 [ 1687.351132] alloc_inode+0x63/0x240 [ 1687.351664] new_inode_pseudo+0x14/0xe0 [ 1687.352243] sock_alloc+0x3c/0x270 [ 1687.352765] __sock_create+0xbd/0x7f0 [ 1687.353319] ? wait_for_completion_io+0x270/0x270 [ 1687.354030] __sys_socket+0xef/0x200 [ 1687.354580] ? fput_many+0x2f/0x1a0 [ 1687.355111] ? move_addr_to_kernel+0x70/0x70 [ 1687.355756] ? ksys_write+0x1a9/0x260 [ 1687.356312] ? __ia32_sys_read+0xb0/0xb0 [ 1687.356915] __x64_sys_socket+0x6f/0xb0 [ 1687.357496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1687.358254] do_syscall_64+0x33/0x40 [ 1687.358796] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1687.359429] RIP: 0033:0x7f82b2a1c197 [ 1687.359866] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.362054] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1687.362067] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1687.362073] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 09:15:11 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 2) [ 1687.362079] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1687.362085] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1687.362092] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 [ 1687.362252] socket: no more sockets [ 1687.369049] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1687.369095] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1687.380080] loop0: detected capacity change from 0 to 2048 [ 1687.405275] EXT4-fs (loop0): Can't read superblock on 2nd try 09:15:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000e0000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1687.439426] kauditd_printk_skb: 32 callbacks suppressed [ 1687.439437] audit: type=1326 audit(1749460511.230:2382): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10084 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1687.441856] FAULT_INJECTION: forcing a failure. [ 1687.441856] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.444774] CPU: 0 PID: 10099 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1687.445075] audit: type=1326 audit(1749460511.230:2383): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10084 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1687.445589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1687.445597] Call Trace: [ 1687.449361] dump_stack+0x107/0x167 [ 1687.449799] should_fail.cold+0x5/0xa [ 1687.450256] ? create_object.isra.0+0x3a/0xa20 [ 1687.450792] should_failslab+0x5/0x20 [ 1687.451234] kmem_cache_alloc+0x5b/0x310 [ 1687.451715] create_object.isra.0+0x3a/0xa20 [ 1687.452229] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1687.452824] kmem_cache_alloc+0x159/0x310 [ 1687.453312] ? selinux_ipv6_output+0x180/0x180 [ 1687.453843] ? sock_free_inode+0x20/0x20 [ 1687.454334] sock_alloc_inode+0x18/0x1c0 [ 1687.454808] ? sock_free_inode+0x20/0x20 [ 1687.455284] alloc_inode+0x63/0x240 [ 1687.455717] new_inode_pseudo+0x14/0xe0 [ 1687.456180] sock_alloc+0x3c/0x270 [ 1687.456597] __sock_create+0xbd/0x7f0 [ 1687.457045] ? wait_for_completion_io+0x270/0x270 [ 1687.457613] __sys_socket+0xef/0x200 [ 1687.458053] ? fput_many+0x2f/0x1a0 [ 1687.458479] ? move_addr_to_kernel+0x70/0x70 [ 1687.458993] ? ksys_write+0x1a9/0x260 [ 1687.459438] ? __ia32_sys_read+0xb0/0xb0 [ 1687.459920] __x64_sys_socket+0x6f/0xb0 [ 1687.460387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1687.461001] do_syscall_64+0x33/0x40 09:15:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xf5ffffff00000000}) [ 1687.461438] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1687.462213] RIP: 0033:0x7f82b2a1c197 [ 1687.462648] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.464804] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1687.465699] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1687.466548] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1687.467391] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1687.468234] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1687.469080] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 [ 1687.469974] audit: type=1326 audit(1749460511.260:2384): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10084 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1687.469988] loop0: detected capacity change from 0 to 2048 [ 1687.470044] audit: type=1326 audit(1749460511.260:2385): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10084 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1687.470100] audit: type=1326 audit(1749460511.260:2386): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10084 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1687.477298] audit: type=1326 audit(1749460511.268:2387): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10084 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1687.477580] audit: type=1326 audit(1749460511.268:2388): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10084 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1687.477638] audit: type=1326 audit(1749460511.268:2389): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10084 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1687.477724] audit: type=1326 audit(1749460511.268:2390): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10084 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1687.477835] audit: type=1326 audit(1749460511.268:2391): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10084 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1687.482453] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1687.482483] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1687.482782] EXT4-fs (loop0): Can't read superblock on 2nd try 09:15:24 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:15:24 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0x80087601, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:15:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:15:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:15:24 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee4", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:15:24 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 3) 09:15:24 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000300000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:15:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xf8ff3f0000000000}) [ 1701.171612] FAULT_INJECTION: forcing a failure. [ 1701.171612] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.173368] CPU: 1 PID: 10128 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1701.174504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1701.176004] Call Trace: [ 1701.176402] dump_stack+0x107/0x167 [ 1701.177074] should_fail.cold+0x5/0xa [ 1701.177737] ? security_inode_alloc+0x34/0x160 [ 1701.178560] should_failslab+0x5/0x20 [ 1701.179211] kmem_cache_alloc+0x5b/0x310 [ 1701.179902] security_inode_alloc+0x34/0x160 [ 1701.180628] inode_init_always+0xa4e/0xd10 [ 1701.181240] alloc_inode+0x84/0x240 [ 1701.181884] new_inode_pseudo+0x14/0xe0 [ 1701.182569] sock_alloc+0x3c/0x270 [ 1701.183166] __sock_create+0xbd/0x7f0 [ 1701.183824] ? wait_for_completion_io+0x270/0x270 [ 1701.184288] loop0: detected capacity change from 0 to 2048 [ 1701.184534] __sys_socket+0xef/0x200 [ 1701.186360] ? fput_many+0x2f/0x1a0 [ 1701.186903] ? move_addr_to_kernel+0x70/0x70 [ 1701.187682] ? ksys_write+0x1a9/0x260 [ 1701.188406] ? __ia32_sys_read+0xb0/0xb0 [ 1701.189049] __x64_sys_socket+0x6f/0xb0 [ 1701.189774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1701.190663] do_syscall_64+0x33/0x40 [ 1701.191296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1701.192179] RIP: 0033:0x7f82b2a1c197 [ 1701.192843] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1701.196100] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1701.197367] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1701.198598] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1701.199768] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1701.200951] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1701.202119] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 [ 1701.203274] socket: no more sockets [ 1701.217771] kauditd_printk_skb: 6 callbacks suppressed [ 1701.217784] audit: type=1326 audit(1749460525.008:2398): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10121 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1701.225497] audit: type=1326 audit(1749460525.014:2399): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10121 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1701.230826] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1701.242615] audit: type=1326 audit(1749460525.020:2400): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10121 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:15:25 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) set_robust_list(&(0x7f00000004c0)={&(0x7f0000000400)={&(0x7f00000002c0)}, 0x1f, &(0x7f0000000480)={&(0x7f0000000440)}}, 0x18) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) r3 = accept$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) readv(r3, &(0x7f0000000880)=[{&(0x7f0000000580)=""/167, 0xa7}, {&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/69, 0x45}], 0x5) openat(r2, &(0x7f0000000280)='./file0\x00', 0x400, 0x4) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1701.270624] audit: type=1326 audit(1749460525.040:2401): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10121 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1701.282159] loop0: detected capacity change from 0 to 2048 [ 1701.287427] EXT4-fs (loop0): Can't read superblock on 2nd try 09:15:25 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0045878, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1701.313232] audit: type=1326 audit(1749460525.045:2402): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10121 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:15:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xfdfdffff00000000}) 09:15:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000900000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1701.319151] audit: type=1326 audit(1749460525.045:2403): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10121 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1701.325586] audit: type=1326 audit(1749460525.051:2404): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10121 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1701.331004] audit: type=1326 audit(1749460525.051:2405): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10121 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1701.336420] audit: type=1326 audit(1749460525.051:2406): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10121 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1701.341876] audit: type=1326 audit(1749460525.051:2407): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10121 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:15:25 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 4) 09:15:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1701.433477] FAULT_INJECTION: forcing a failure. [ 1701.433477] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.436097] CPU: 0 PID: 10148 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1701.437703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 09:15:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1701.439633] Call Trace: [ 1701.440412] dump_stack+0x107/0x167 [ 1701.441254] should_fail.cold+0x5/0xa [ 1701.442134] ? create_object.isra.0+0x3a/0xa20 [ 1701.443198] should_failslab+0x5/0x20 [ 1701.444079] kmem_cache_alloc+0x5b/0x310 [ 1701.445019] create_object.isra.0+0x3a/0xa20 [ 1701.446021] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1701.447207] kmem_cache_alloc+0x159/0x310 [ 1701.448163] security_inode_alloc+0x34/0x160 [ 1701.449178] inode_init_always+0xa4e/0xd10 [ 1701.450148] alloc_inode+0x84/0x240 [ 1701.450989] new_inode_pseudo+0x14/0xe0 [ 1701.451909] sock_alloc+0x3c/0x270 [ 1701.452735] __sock_create+0xbd/0x7f0 [ 1701.453603] ? wait_for_completion_io+0x270/0x270 [ 1701.454724] __sys_socket+0xef/0x200 [ 1701.455577] ? fput_many+0x2f/0x1a0 [ 1701.456409] ? move_addr_to_kernel+0x70/0x70 [ 1701.457422] ? ksys_write+0x1a9/0x260 [ 1701.458301] ? __ia32_sys_read+0xb0/0xb0 [ 1701.459241] __x64_sys_socket+0x6f/0xb0 [ 1701.460158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1701.461336] do_syscall_64+0x33/0x40 [ 1701.462205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1701.463389] RIP: 0033:0x7f82b2a1c197 [ 1701.464246] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1701.468477] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1701.470249] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1701.471899] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1701.473555] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1701.475210] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1701.476872] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 [ 1701.541177] loop0: detected capacity change from 0 to 2048 [ 1701.567411] EXT4-fs (loop0): Can't read superblock on 2nd try 09:15:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:15:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xffefffff00000000}) 09:15:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:15:39 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000d00000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:15:39 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000200)={0x10000, 0x20, 0x1}) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:15:39 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee4", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:15:39 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 5) 09:15:39 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0045878, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1716.116799] kauditd_printk_skb: 4 callbacks suppressed [ 1716.116820] audit: type=1326 audit(1749460539.907:2412): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10165 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1716.139343] audit: type=1326 audit(1749460539.907:2413): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10165 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1716.143593] audit: type=1326 audit(1749460539.907:2414): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10165 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1716.144543] loop0: detected capacity change from 0 to 2048 [ 1716.147674] audit: type=1326 audit(1749460539.907:2415): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10165 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1716.151463] audit: type=1326 audit(1749460539.909:2416): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10165 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:15:39 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee4", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1716.156172] audit: type=1326 audit(1749460539.909:2417): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10165 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1716.159673] audit: type=1326 audit(1749460539.909:2418): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10165 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1716.163112] audit: type=1326 audit(1749460539.909:2419): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10165 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1716.177599] FAULT_INJECTION: forcing a failure. [ 1716.177599] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.179230] audit: type=1326 audit(1749460539.909:2420): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10165 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1716.180282] CPU: 1 PID: 10184 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1716.180300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.186904] Call Trace: [ 1716.187534] dump_stack+0x107/0x167 [ 1716.188397] should_fail.cold+0x5/0xa [ 1716.189297] ? sk_prot_alloc+0x11d/0x2c0 [ 1716.190042] audit: type=1326 audit(1749460539.909:2421): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10165 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1716.190263] should_failslab+0x5/0x20 [ 1716.194154] __kmalloc+0x72/0x390 [ 1716.194978] sk_prot_alloc+0x11d/0x2c0 [ 1716.195889] sk_alloc+0x30/0x350 [ 1716.196683] __netlink_create+0x63/0x340 [ 1716.197642] netlink_create+0x3b2/0x5e0 [ 1716.198583] ? genl_start+0x670/0x670 [ 1716.199479] __sock_create+0x358/0x7f0 [ 1716.200396] __sys_socket+0xef/0x200 [ 1716.201261] ? fput_many+0x2f/0x1a0 [ 1716.202109] ? move_addr_to_kernel+0x70/0x70 [ 1716.203143] ? ksys_write+0x1a9/0x260 [ 1716.204032] ? __ia32_sys_read+0xb0/0xb0 [ 1716.204989] __x64_sys_socket+0x6f/0xb0 [ 1716.205918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.207125] do_syscall_64+0x33/0x40 [ 1716.207994] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1716.209187] RIP: 0033:0x7f82b2a1c197 [ 1716.210055] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.214406] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1716.216236] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1716.217956] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1716.219677] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.221394] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1716.223114] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 09:15:40 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0189436, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1716.258789] EXT4-fs (loop0): Can't read superblock on 2nd try 09:15:40 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 6) [ 1716.301093] FAULT_INJECTION: forcing a failure. [ 1716.301093] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.302770] CPU: 0 PID: 10193 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1716.303751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.304919] Call Trace: [ 1716.305298] dump_stack+0x107/0x167 [ 1716.305816] should_fail.cold+0x5/0xa [ 1716.306368] ? create_object.isra.0+0x3a/0xa20 [ 1716.307033] should_failslab+0x5/0x20 09:15:40 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0x68) r2 = socket(0x1, 0x80000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0x7ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x2, 0x4004, @fd=r2, 0x4, &(0x7f0000000400)="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", 0x1000, 0x8, 0x1, {0x0, r4}}, 0x10000) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1716.307047] kmem_cache_alloc+0x5b/0x310 [ 1716.307065] create_object.isra.0+0x3a/0xa20 09:15:40 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000e00000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:15:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xffffffff00000000}) [ 1716.307075] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1716.307091] __kmalloc+0x16e/0x390 [ 1716.307108] sk_prot_alloc+0x11d/0x2c0 09:15:40 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 7) [ 1716.307122] sk_alloc+0x30/0x350 [ 1716.307137] __netlink_create+0x63/0x340 [ 1716.307153] netlink_create+0x3b2/0x5e0 09:15:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:15:40 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000010000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1716.307166] ? genl_start+0x670/0x670 [ 1716.307182] __sock_create+0x358/0x7f0 09:15:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1716.307201] __sys_socket+0xef/0x200 [ 1716.307211] ? fput_many+0x2f/0x1a0 [ 1716.307224] ? move_addr_to_kernel+0x70/0x70 [ 1716.307236] ? ksys_write+0x1a9/0x260 [ 1716.307249] ? __ia32_sys_read+0xb0/0xb0 [ 1716.307269] __x64_sys_socket+0x6f/0xb0 [ 1716.307283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.307294] do_syscall_64+0x33/0x40 [ 1716.307308] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1716.307316] RIP: 0033:0x7f82b2a1c197 [ 1716.307330] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.307337] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1716.307351] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1716.307359] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1716.307367] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.307375] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1716.307383] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 [ 1716.437365] loop0: detected capacity change from 0 to 2048 [ 1716.444316] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1716.453680] loop0: detected capacity change from 0 to 2048 09:15:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x2}) 09:15:40 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x0, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1716.455685] EXT4-fs (loop0): Can't read superblock on 2nd try 09:15:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x15, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1716.507726] FAULT_INJECTION: forcing a failure. [ 1716.507726] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.510602] CPU: 1 PID: 10216 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1716.512250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.514229] Call Trace: [ 1716.514873] dump_stack+0x107/0x167 [ 1716.515744] should_fail.cold+0x5/0xa [ 1716.516659] ? selinux_sk_alloc_security+0x8b/0x1b0 [ 1716.517867] should_failslab+0x5/0x20 [ 1716.518800] kmem_cache_alloc_trace+0x55/0x320 [ 1716.519897] selinux_sk_alloc_security+0x8b/0x1b0 [ 1716.521049] security_sk_alloc+0x56/0xb0 [ 1716.522028] sk_prot_alloc+0x137/0x2c0 [ 1716.522967] sk_alloc+0x30/0x350 [ 1716.523765] __netlink_create+0x63/0x340 [ 1716.524717] netlink_create+0x3b2/0x5e0 [ 1716.525652] ? genl_start+0x670/0x670 [ 1716.526566] __sock_create+0x358/0x7f0 [ 1716.527486] __sys_socket+0xef/0x200 [ 1716.528353] ? fput_many+0x2f/0x1a0 [ 1716.529205] ? move_addr_to_kernel+0x70/0x70 [ 1716.530235] ? ksys_write+0x1a9/0x260 [ 1716.531145] ? __ia32_sys_read+0xb0/0xb0 [ 1716.532110] __x64_sys_socket+0x6f/0xb0 [ 1716.533047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.534269] do_syscall_64+0x33/0x40 [ 1716.535149] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1716.536353] RIP: 0033:0x7f82b2a1c197 [ 1716.537225] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.541482] RSP: 002b:00007f82aff6e0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1716.543249] RAX: ffffffffffffffda RBX: 00007f82b2b2e020 RCX: 00007f82b2a1c197 [ 1716.544896] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1716.546548] RBP: 00007f82aff6f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.548189] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1716.549829] R13: 00007ffc5d05057f R14: 00007f82aff6f300 R15: 0000000000022000 [ 1716.582264] loop0: detected capacity change from 0 to 2048 [ 1716.610996] EXT4-fs (loop0): Can't read superblock on 2nd try 09:15:55 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 8) 09:15:55 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x7399, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8023, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10588, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xa, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000480)=0x1, 0x4) set_robust_list(&(0x7f0000000440)={&(0x7f0000000280)={&(0x7f0000000200)}, 0xff05, &(0x7f0000000400)={&(0x7f00000002c0)}}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x31ec, &(0x7f00000004c0)={0x0, 0xf9b6, 0xa, 0x0, 0x2ef, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580)=0x0) r6 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"]) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000640)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r6, &(0x7f00000005c0)={0x240, 0x104, 0x2}, &(0x7f0000000600)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0xfffffc01) 09:15:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2e, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:15:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x3}) 09:15:55 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc020660b, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:15:55 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000020000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:15:55 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x0, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:15:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1731.670169] FAULT_INJECTION: forcing a failure. [ 1731.670169] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.672706] CPU: 0 PID: 10241 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1731.674174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1731.675947] Call Trace: [ 1731.676512] dump_stack+0x107/0x167 [ 1731.677288] should_fail.cold+0x5/0xa [ 1731.678098] ? create_object.isra.0+0x3a/0xa20 [ 1731.679071] should_failslab+0x5/0x20 [ 1731.679878] kmem_cache_alloc+0x5b/0x310 [ 1731.680741] create_object.isra.0+0x3a/0xa20 [ 1731.681664] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1731.682745] kmem_cache_alloc_trace+0x151/0x320 [ 1731.683742] selinux_sk_alloc_security+0x8b/0x1b0 [ 1731.684760] security_sk_alloc+0x56/0xb0 [ 1731.685620] sk_prot_alloc+0x137/0x2c0 [ 1731.686446] sk_alloc+0x30/0x350 [ 1731.687175] __netlink_create+0x63/0x340 [ 1731.688040] netlink_create+0x3b2/0x5e0 [ 1731.688876] ? genl_start+0x670/0x670 [ 1731.689688] __sock_create+0x358/0x7f0 [ 1731.690531] __sys_socket+0xef/0x200 [ 1731.691318] ? fput_many+0x2f/0x1a0 [ 1731.692089] ? move_addr_to_kernel+0x70/0x70 [ 1731.693019] ? ksys_write+0x1a9/0x260 [ 1731.693823] ? __ia32_sys_read+0xb0/0xb0 [ 1731.694693] __x64_sys_socket+0x6f/0xb0 [ 1731.695536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1731.696623] do_syscall_64+0x33/0x40 [ 1731.697410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1731.698500] RIP: 0033:0x7f82b2a1c197 [ 1731.699290] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.703186] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1731.704804] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1731.706317] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1731.707856] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1731.709371] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1731.710883] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 [ 1731.716438] kauditd_printk_skb: 29 callbacks suppressed [ 1731.716457] audit: type=1326 audit(1749460555.507:2451): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10234 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1731.729402] audit: type=1326 audit(1749460555.513:2452): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10234 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1731.734713] loop0: detected capacity change from 0 to 2048 [ 1731.762246] audit: type=1326 audit(1749460555.514:2453): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10234 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1731.769060] audit: type=1326 audit(1749460555.515:2454): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10234 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1731.775133] audit: type=1326 audit(1749460555.515:2455): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10234 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1731.793918] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1731.829130] audit: type=1326 audit(1749460555.515:2456): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10234 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1731.847488] loop0: detected capacity change from 0 to 2048 09:15:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:15:55 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1731.903385] FAULT_INJECTION: forcing a failure. [ 1731.903385] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.905999] CPU: 1 PID: 10257 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1731.907618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1731.909501] Call Trace: [ 1731.910111] dump_stack+0x107/0x167 [ 1731.910969] should_fail.cold+0x5/0xa [ 1731.911865] ? __d_alloc+0x2a/0x990 [ 1731.912718] should_failslab+0x5/0x20 [ 1731.913602] kmem_cache_alloc+0x5b/0x310 [ 1731.914568] ? expand_files+0x635/0xb30 [ 1731.915520] __d_alloc+0x2a/0x990 [ 1731.916316] ? alloc_fd+0x2e7/0x670 [ 1731.917169] d_alloc_pseudo+0x19/0x70 [ 1731.918044] alloc_file_pseudo+0xce/0x250 [ 1731.919013] ? alloc_file+0x5a0/0x5a0 [ 1731.919888] ? do_raw_spin_unlock+0x4f/0x220 [ 1731.920892] ? _raw_spin_unlock+0x1a/0x30 [ 1731.921833] ? alloc_fd+0x2e7/0x670 [ 1731.922692] sock_alloc_file+0x4f/0x1a0 [ 1731.923584] __sys_socket+0x13d/0x200 [ 1731.924430] ? fput_many+0x2f/0x1a0 [ 1731.925226] ? move_addr_to_kernel+0x70/0x70 [ 1731.926203] ? ksys_write+0x1a9/0x260 09:15:55 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 9) 09:15:55 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000030000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1731.927075] ? __ia32_sys_read+0xb0/0xb0 [ 1731.928249] __x64_sys_socket+0x6f/0xb0 [ 1731.929033] audit: type=1326 audit(1749460555.527:2457): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10234 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1731.929139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1731.929164] do_syscall_64+0x33/0x40 [ 1731.935649] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1731.936765] RIP: 0033:0x7f82b2a1c197 [ 1731.937579] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.941630] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1731.943321] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1731.944902] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1731.946503] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1731.948063] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1731.949631] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 [ 1731.960080] audit: type=1326 audit(1749460555.527:2458): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10234 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1731.987267] audit: type=1326 audit(1749460555.527:2459): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10234 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1732.001489] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1732.016032] audit: type=1326 audit(1749460555.533:2460): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10234 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:16:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:16:11 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481223, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:16:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x4}) 09:16:11 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x0, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:16:11 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000200)=0x86e, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:16:11 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 10) 09:16:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x60, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:16:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000090000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1747.309996] loop0: detected capacity change from 0 to 2048 [ 1747.325038] FAULT_INJECTION: forcing a failure. [ 1747.325038] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.327815] CPU: 0 PID: 10281 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1747.329512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1747.331570] Call Trace: [ 1747.332219] dump_stack+0x107/0x167 [ 1747.333119] should_fail.cold+0x5/0xa [ 1747.334062] ? create_object.isra.0+0x3a/0xa20 [ 1747.335211] should_failslab+0x5/0x20 [ 1747.336144] kmem_cache_alloc+0x5b/0x310 [ 1747.337149] create_object.isra.0+0x3a/0xa20 [ 1747.338226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1747.339488] kmem_cache_alloc+0x159/0x310 [ 1747.340519] __d_alloc+0x2a/0x990 [ 1747.341366] ? alloc_fd+0x2e7/0x670 [ 1747.342263] d_alloc_pseudo+0x19/0x70 [ 1747.343226] alloc_file_pseudo+0xce/0x250 [ 1747.344238] ? alloc_file+0x5a0/0x5a0 [ 1747.345168] ? do_raw_spin_unlock+0x4f/0x220 [ 1747.346244] ? _raw_spin_unlock+0x1a/0x30 [ 1747.347249] ? alloc_fd+0x2e7/0x670 [ 1747.348112] sock_alloc_file+0x4f/0x1a0 [ 1747.349090] __sys_socket+0x13d/0x200 [ 1747.350023] ? fput_many+0x2f/0x1a0 [ 1747.350934] ? move_addr_to_kernel+0x70/0x70 [ 1747.352001] ? ksys_write+0x1a9/0x260 [ 1747.352934] ? __ia32_sys_read+0xb0/0xb0 [ 1747.353935] __x64_sys_socket+0x6f/0xb0 [ 1747.354921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1747.356169] do_syscall_64+0x33/0x40 [ 1747.357076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1747.358317] RIP: 0033:0x7f82b2a1c197 [ 1747.359236] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1747.363704] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1747.365554] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1747.367309] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1747.369069] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1747.370843] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1747.372611] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 09:16:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1747.411800] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1747.455687] kauditd_printk_skb: 4 callbacks suppressed [ 1747.455706] audit: type=1326 audit(1749460571.246:2465): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10275 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1747.467021] audit: type=1326 audit(1749460571.246:2466): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10275 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:16:11 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 11) 09:16:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000d0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1747.535059] audit: type=1326 audit(1749460571.254:2467): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10275 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:16:11 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481225, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:16:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:16:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x8}) 09:16:11 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x400, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) set_robust_list(&(0x7f0000000440)={&(0x7f00000006c0)={&(0x7f0000000200)}, 0x4, &(0x7f0000000400)={&(0x7f00000002c0)}}, 0x18) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x40801, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x71c7, 0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2a4}, r3, 0x10, r2, 0x2) get_robust_list(r3, &(0x7f0000000540)=&(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x1f, 0x80000001, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x700, 0x7, 0x81}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000680)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x63, r4}) [ 1747.582393] audit: type=1326 audit(1749460571.254:2468): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10275 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:16:11 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x0, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1747.602148] audit: type=1326 audit(1749460571.254:2469): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10275 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:16:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1747.622693] audit: type=1326 audit(1749460571.258:2470): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10275 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1747.644115] audit: type=1326 audit(1749460571.258:2471): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10275 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1747.649531] audit: type=1326 audit(1749460571.258:2472): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10275 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1747.658303] audit: type=1326 audit(1749460571.267:2473): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10275 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1747.665682] audit: type=1326 audit(1749460571.267:2474): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10275 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1747.729279] FAULT_INJECTION: forcing a failure. [ 1747.729279] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.731770] CPU: 1 PID: 10316 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1747.733258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1747.735047] Call Trace: [ 1747.735620] dump_stack+0x107/0x167 [ 1747.736405] should_fail.cold+0x5/0xa [ 1747.737227] ? __alloc_file+0x21/0x320 [ 1747.738070] should_failslab+0x5/0x20 [ 1747.738899] kmem_cache_alloc+0x5b/0x310 [ 1747.739773] __alloc_file+0x21/0x320 [ 1747.740571] alloc_empty_file+0x6d/0x170 [ 1747.741444] alloc_file+0x5e/0x5a0 [ 1747.742211] alloc_file_pseudo+0x16a/0x250 [ 1747.743126] ? alloc_file+0x5a0/0x5a0 [ 1747.743945] ? do_raw_spin_unlock+0x4f/0x220 [ 1747.744891] ? _raw_spin_unlock+0x1a/0x30 [ 1747.745781] ? alloc_fd+0x2e7/0x670 [ 1747.746570] sock_alloc_file+0x4f/0x1a0 [ 1747.747441] __sys_socket+0x13d/0x200 [ 1747.748256] ? fput_many+0x2f/0x1a0 [ 1747.749040] ? move_addr_to_kernel+0x70/0x70 [ 1747.749985] ? ksys_write+0x1a9/0x260 [ 1747.750813] ? __ia32_sys_read+0xb0/0xb0 [ 1747.751695] __x64_sys_socket+0x6f/0xb0 [ 1747.752551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1747.753659] do_syscall_64+0x33/0x40 [ 1747.754461] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1747.755572] RIP: 0033:0x7f82b2a1c197 [ 1747.756372] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1747.760331] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1747.761971] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1747.763513] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1747.765053] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1747.766590] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1747.768140] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 09:16:11 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc048122a, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:16:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:16:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x9}) 09:16:29 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc048122b, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:16:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x410, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:16:29 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000280)={0xbd, 0x9, 0x5}) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x4, 0x9, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:16:29 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 12) [ 1766.196372] loop0: detected capacity change from 0 to 2048 [ 1766.198421] FAULT_INJECTION: forcing a failure. [ 1766.198421] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.200369] CPU: 0 PID: 10335 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1766.201557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.202991] Call Trace: [ 1766.203449] dump_stack+0x107/0x167 [ 1766.204067] should_fail.cold+0x5/0xa [ 1766.204714] ? create_object.isra.0+0x3a/0xa20 [ 1766.205483] should_failslab+0x5/0x20 [ 1766.206124] kmem_cache_alloc+0x5b/0x310 [ 1766.206816] create_object.isra.0+0x3a/0xa20 [ 1766.207563] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1766.208398] kmem_cache_alloc+0x159/0x310 [ 1766.209099] __alloc_file+0x21/0x320 [ 1766.209728] alloc_empty_file+0x6d/0x170 [ 1766.210405] alloc_file+0x5e/0x5a0 [ 1766.211016] alloc_file_pseudo+0x16a/0x250 [ 1766.211740] ? alloc_file+0x5a0/0x5a0 [ 1766.212369] ? do_raw_spin_unlock+0x4f/0x220 [ 1766.213124] ? _raw_spin_unlock+0x1a/0x30 [ 1766.213830] ? alloc_fd+0x2e7/0x670 [ 1766.214447] sock_alloc_file+0x4f/0x1a0 [ 1766.215116] __sys_socket+0x13d/0x200 [ 1766.215741] ? fput_many+0x2f/0x1a0 [ 1766.216354] ? move_addr_to_kernel+0x70/0x70 [ 1766.217080] ? ksys_write+0x1a9/0x260 [ 1766.217699] ? __ia32_sys_read+0xb0/0xb0 [ 1766.218360] __x64_sys_socket+0x6f/0xb0 [ 1766.219017] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.219851] do_syscall_64+0x33/0x40 [ 1766.220438] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1766.221281] RIP: 0033:0x7f82b2a1c197 [ 1766.221884] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.224855] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1766.226095] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1766.227277] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1766.228430] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.229599] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1766.230746] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 [ 1766.233159] EXT4-fs (loop0): Can't read superblock on 2nd try 09:16:29 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x0, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:16:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000e0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1766.259534] loop0: detected capacity change from 0 to 2048 [ 1766.268729] kauditd_printk_skb: 20 callbacks suppressed [ 1766.268747] audit: type=1326 audit(1749460590.059:2495): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10338 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1766.278249] audit: type=1326 audit(1749460590.059:2496): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10338 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:16:30 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000ffffff0f0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1766.300446] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1766.309179] audit: type=1326 audit(1749460590.094:2497): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10338 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:16:30 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) get_robust_list(0xffffffffffffffff, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f0000000480)={&(0x7f0000000440)}, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)}}, &(0x7f00000005c0)=0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000400)={&(0x7f0000000200), 0x7, &(0x7f00000002c0)={&(0x7f0000000280)}}, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:16:30 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc048122d, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1766.372191] audit: type=1326 audit(1749460590.095:2498): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10338 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:16:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1766.394116] audit: type=1326 audit(1749460590.095:2499): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10338 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:16:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xa}) [ 1766.410001] audit: type=1326 audit(1749460590.098:2500): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10338 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:16:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1766.431078] audit: type=1326 audit(1749460590.100:2501): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10338 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1766.445979] audit: type=1326 audit(1749460590.100:2502): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10338 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1766.457978] audit: type=1326 audit(1749460590.100:2503): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10338 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1766.470324] audit: type=1326 audit(1749460590.100:2504): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10338 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1766.510226] loop0: detected capacity change from 0 to 2048 [ 1766.526239] EXT4-fs (loop0): Can't read superblock on 2nd try 09:16:44 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 13) 09:16:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:16:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:16:44 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc048122e, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:16:44 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5e, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x3, 0x800000, 0x3, 0x0, 0xd0a8, 0x4, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:16:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xd}) 09:16:44 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x0, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1780.997117] kauditd_printk_skb: 5 callbacks suppressed [ 1780.997129] audit: type=1326 audit(1749460604.787:2510): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10374 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:16:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000fffffff50000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1781.011651] audit: type=1326 audit(1749460604.802:2511): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10374 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1781.031881] FAULT_INJECTION: forcing a failure. [ 1781.031881] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.036466] CPU: 1 PID: 10383 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1781.038248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1781.040412] Call Trace: [ 1781.041096] dump_stack+0x107/0x167 [ 1781.042043] should_fail.cold+0x5/0xa [ 1781.043040] ? security_file_alloc+0x34/0x170 [ 1781.044164] should_failslab+0x5/0x20 [ 1781.044995] kmem_cache_alloc+0x5b/0x310 [ 1781.045880] security_file_alloc+0x34/0x170 [ 1781.046817] __alloc_file+0xb7/0x320 [ 1781.047634] alloc_empty_file+0x6d/0x170 [ 1781.048511] alloc_file+0x5e/0x5a0 [ 1781.049282] alloc_file_pseudo+0x16a/0x250 [ 1781.050179] ? alloc_file+0x5a0/0x5a0 [ 1781.050975] ? do_raw_spin_unlock+0x4f/0x220 [ 1781.051927] ? _raw_spin_unlock+0x1a/0x30 [ 1781.052807] ? alloc_fd+0x2e7/0x670 [ 1781.053590] sock_alloc_file+0x4f/0x1a0 [ 1781.054428] __sys_socket+0x13d/0x200 [ 1781.055240] ? fput_many+0x2f/0x1a0 [ 1781.056034] ? move_addr_to_kernel+0x70/0x70 [ 1781.056989] ? ksys_write+0x1a9/0x260 [ 1781.057817] ? __ia32_sys_read+0xb0/0xb0 [ 1781.058707] __x64_sys_socket+0x6f/0xb0 [ 1781.059693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1781.060893] do_syscall_64+0x33/0x40 [ 1781.061702] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1781.062817] RIP: 0033:0x7f82b2a1c197 [ 1781.063634] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1781.067560] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1781.069167] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1781.070445] audit: type=1326 audit(1749460604.861:2512): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10374 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1781.070682] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1781.074961] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1781.076502] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1781.078008] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 [ 1781.081341] loop0: detected capacity change from 0 to 2048 [ 1781.082334] audit: type=1326 audit(1749460604.873:2513): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10374 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1781.095438] audit: type=1326 audit(1749460604.885:2514): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10374 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1781.113450] audit: type=1326 audit(1749460604.894:2515): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10374 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1781.126117] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1781.128720] audit: type=1326 audit(1749460604.894:2516): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10374 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1781.141972] audit: type=1326 audit(1749460604.894:2517): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10374 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1781.148347] audit: type=1326 audit(1749460604.902:2518): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10374 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:16:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xe}) [ 1781.153239] audit: type=1326 audit(1749460604.902:2519): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10374 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:16:44 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:16:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000fffffff0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:16:45 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x40801, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x71c7, 0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2a4}, r2, 0x10, r1, 0x2) get_robust_list(r2, &(0x7f00000014c0)=&(0x7f0000001480)={&(0x7f00000002c0)={&(0x7f0000000280)}, 0x0, &(0x7f0000001440)={&(0x7f0000001400)}}, &(0x7f0000001500)=0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x7}, 0x8028, 0x0, 0x800100, 0x3, 0x0, 0xd0ac, 0x4}, r2, 0xffffffffffffffff, r0, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = syz_open_dev$vcsa(&(0x7f0000000200), 0x22, 0x0) r6 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001640)={0x40, 0x0, &(0x7f0000001540)=[@free_buffer={0x40086303, r6}, @dead_binder_done, @acquire={0x40046305, 0x2}, @enter_looper, @request_death={0x400c630e, 0x3}, @exit_looper, @increfs={0x40046304, 0x1}], 0x8a, 0x0, &(0x7f0000001580)="9b2cf270a4f03de696e58e72d0e299e3ed568dac09d70029dbad89ea2065abfc6f66f14da4b2c6fda2b9088ce916291e89ab8d228ae594789133574fad8c31e8a5bf5da092a27188bebdc0bca7958bd0e8a760ef82502a5929b0b5a38ed62aee62f79eca406c54f57392616239ff05b90bb50049d71de36dc9dbb1f08ccbbbdbf2613d62fed1287d8387"}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000400)={{r7}, "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"}) readv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:16:45 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc048122f, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:16:45 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 14) 09:16:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:16:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1781.316110] FAULT_INJECTION: forcing a failure. [ 1781.316110] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.317458] CPU: 0 PID: 10411 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1781.318248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1781.319208] Call Trace: [ 1781.319516] dump_stack+0x107/0x167 [ 1781.319934] should_fail.cold+0x5/0xa [ 1781.320375] ? create_object.isra.0+0x3a/0xa20 [ 1781.320912] should_failslab+0x5/0x20 [ 1781.321345] kmem_cache_alloc+0x5b/0x310 [ 1781.321810] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1781.322436] create_object.isra.0+0x3a/0xa20 [ 1781.322936] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1781.323524] kmem_cache_alloc+0x159/0x310 [ 1781.324001] security_file_alloc+0x34/0x170 [ 1781.324498] __alloc_file+0xb7/0x320 [ 1781.324933] alloc_empty_file+0x6d/0x170 [ 1781.325416] alloc_file+0x5e/0x5a0 [ 1781.325841] alloc_file_pseudo+0x16a/0x250 [ 1781.326346] ? alloc_file+0x5a0/0x5a0 [ 1781.326798] ? do_raw_spin_unlock+0x4f/0x220 [ 1781.327333] ? _raw_spin_unlock+0x1a/0x30 [ 1781.327827] ? alloc_fd+0x2e7/0x670 [ 1781.328266] sock_alloc_file+0x4f/0x1a0 [ 1781.328742] __sys_socket+0x13d/0x200 [ 1781.329195] ? fput_many+0x2f/0x1a0 [ 1781.329617] ? move_addr_to_kernel+0x70/0x70 [ 1781.330145] ? ksys_write+0x1a9/0x260 [ 1781.330597] ? __ia32_sys_read+0xb0/0xb0 [ 1781.331092] __x64_sys_socket+0x6f/0xb0 [ 1781.331570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1781.332175] do_syscall_64+0x33/0x40 [ 1781.332621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1781.333227] RIP: 0033:0x7f82b2a1c197 [ 1781.333652] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1781.335771] RSP: 002b:00007f82aff8f0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1781.336675] RAX: ffffffffffffffda RBX: 00007f82b2b2df60 RCX: 00007f82b2a1c197 [ 1781.337528] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1781.338377] RBP: 00007f82aff901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1781.339235] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 1781.340077] R13: 00007ffc5d05057f R14: 00007f82aff90300 R15: 0000000000022000 09:16:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xf}) [ 1781.413021] loop0: detected capacity change from 0 to 2048 [ 1781.447166] EXT4-fs (loop0): Can't read superblock on 2nd try 09:16:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000f5ffffff0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:16:59 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481230, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:16:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1795.523469] FAULT_INJECTION: forcing a failure. [ 1795.523469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.525079] CPU: 0 PID: 10432 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1795.525997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1795.527084] Call Trace: [ 1795.527447] dump_stack+0x107/0x167 [ 1795.527929] should_fail.cold+0x5/0xa [ 1795.528436] _copy_from_user+0x2e/0x1b0 [ 1795.528962] move_addr_to_kernel.part.0+0x31/0x110 [ 1795.529605] __sys_sendto+0x166/0x320 [ 1795.530107] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1795.530721] ? fd_install+0x1c4/0x680 [ 1795.531240] ? fd_install+0x1dc/0x680 [ 1795.531738] ? __sys_socket+0x16d/0x200 [ 1795.532259] ? fput_many+0x2f/0x1a0 [ 1795.532735] ? move_addr_to_kernel+0x70/0x70 [ 1795.533313] ? ksys_write+0x1a9/0x260 [ 1795.533814] ? __ia32_sys_read+0xb0/0xb0 [ 1795.534346] __x64_sys_sendto+0xdd/0x1b0 [ 1795.534883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1795.535562] do_syscall_64+0x33/0x40 [ 1795.536047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1795.536711] RIP: 0033:0x7f82b29cd8ac [ 1795.537195] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 1795.539612] RSP: 002b:00007f82aff8f020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1795.540608] RAX: ffffffffffffffda RBX: 00007f82aff8f110 RCX: 00007f82b29cd8ac [ 1795.541538] RDX: 0000000000000020 RSI: 00007f82aff8f160 RDI: 0000000000000004 [ 1795.542471] RBP: 0000000000000000 R08: 00007f82aff8f074 R09: 000000000000000c [ 1795.543411] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f82aff8f0c8 [ 1795.544351] R13: 00007f82aff8f160 R14: 0000000000000004 R15: 0000000000000000 [ 1795.552905] loop0: detected capacity change from 0 to 2048 09:16:59 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (fail_nth: 15) 09:16:59 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x80, 0x9, 0x8, 0x20, 0x0, 0x7d, 0x200e, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200)}, 0x5020, 0x1, 0x0, 0x5, 0x7, 0x5, 0x6, 0x0, 0x4, 0x0, 0x10001}, 0x0, 0x0, r0, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:16:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x10}) 09:16:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:16:59 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1795.574152] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1795.583119] kauditd_printk_skb: 19 callbacks suppressed [ 1795.583139] audit: type=1326 audit(1749460619.370:2539): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1795.587454] audit: type=1326 audit(1749460619.374:2540): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1795.595399] audit: type=1326 audit(1749460619.378:2541): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1795.598275] audit: type=1326 audit(1749460619.383:2542): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:16:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000200000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1795.635065] audit: type=1326 audit(1749460619.383:2543): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:16:59 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481258, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1795.641391] audit: type=1326 audit(1749460619.383:2544): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1795.655845] loop0: detected capacity change from 0 to 2048 [ 1795.659339] EXT4-fs (loop0): Can't read superblock on 2nd try 09:16:59 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000080)) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x5, 0x4, 0x9, 0x7f, 0x0, 0x6, 0x60200, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0xbb2, 0x10000}, 0x1442, 0x4, 0x2, 0x3, 0x8, 0xfffffff9, 0x1ff, 0x0, 0x7, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x7, r1, 0x11) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000200)={0x3, 0x2, 0x2}) 09:16:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x300}) 09:16:59 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1795.708707] audit: type=1326 audit(1749460619.386:2545): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:16:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000300000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:16:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1795.723726] audit: type=1326 audit(1749460619.389:2546): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1795.726648] audit: type=1326 audit(1749460619.389:2547): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1795.731321] audit: type=1326 audit(1749460619.389:2548): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:16:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1795.764068] loop0: detected capacity change from 0 to 2560 09:16:59 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) [ 1795.788454] EXT4-fs (loop0): Can't read superblock on 2nd try 09:16:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x900}) 09:17:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000900000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:17:15 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481263, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:17:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xa00}) 09:17:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:17:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:17:15 executing program 3: rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0xbf1, 0x1000, 0x2}, 0x2}, 0x20, 0x1, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x6, 0x7fffffff, 0x23, 0x7f}, 0x2}, 0x20, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:17:15 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:17:15 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r2 = getpid() get_robust_list(r2, &(0x7f0000000480)=&(0x7f0000000440)={&(0x7f0000000280)={&(0x7f0000000200)}, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)}}, &(0x7f00000004c0)=0x18) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1811.963568] loop0: detected capacity change from 0 to 2560 [ 1812.033572] kauditd_printk_skb: 22 callbacks suppressed [ 1812.033596] audit: type=1326 audit(1749460635.824:2571): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10493 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1812.040342] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1812.043537] audit: type=1326 audit(1749460635.831:2572): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10493 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:17:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xd00}) [ 1812.081524] audit: type=1326 audit(1749460635.843:2573): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10493 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1812.088030] audit: type=1326 audit(1749460635.843:2574): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10493 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1812.093784] audit: type=1326 audit(1749460635.851:2575): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10493 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1812.100839] audit: type=1326 audit(1749460635.881:2576): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10493 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1812.106081] audit: type=1326 audit(1749460635.881:2577): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10493 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1812.111407] audit: type=1326 audit(1749460635.881:2578): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10493 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1812.118022] audit: type=1326 audit(1749460635.881:2579): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10493 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1812.123140] audit: type=1326 audit(1749460635.882:2580): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10493 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:17:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xe00}) 09:17:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:17:31 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x6, 0x3, 0x9, 0xd0a7, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r2 = io_uring_setup(0x5ec3, &(0x7f0000000280)={0x0, 0xf90b, 0x0, 0x1, 0xa1, 0x0, r1}) readv(r2, &(0x7f0000001880)=[{&(0x7f0000000400)=""/123, 0x7b}, {&(0x7f0000000480)=""/188, 0xbc}, {&(0x7f0000000540)=""/208, 0xd0}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/208, 0xd0}, {&(0x7f0000001740)=""/187, 0xbb}, {&(0x7f0000001800)=""/91, 0x5b}], 0x7) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:17:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:17:31 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481264, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:17:31 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000d00000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:17:31 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2, 0xfffd, 0x2, 0x8}, 0x4}, 0x20, 0x1, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8080}, 0x4000400) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x8, 0x80000000, 0x800}, 0x3}, 0x20, 0x1, 0x0) rseq(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x3, 0xfff, 0x1, 0x5}, 0x4}, 0x20, 0x1, 0x0) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x10001, 0x1, 0x6}, 0x2}, 0x20, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) rseq(&(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x5, 0x8f, 0x74, 0x5}, 0x2}, 0x20, 0x0, 0x0) 09:17:31 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1827.981659] kauditd_printk_skb: 5 callbacks suppressed [ 1827.981670] audit: type=1326 audit(1749460651.772:2586): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10527 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1827.988192] audit: type=1326 audit(1749460651.779:2587): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10527 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1827.989384] audit: type=1326 audit(1749460651.780:2588): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10527 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1828.007421] loop0: detected capacity change from 0 to 3072 [ 1828.020475] audit: type=1326 audit(1749460651.790:2589): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10527 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1828.025807] EXT4-fs (loop0): Can't read superblock on 2nd try 09:17:31 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000e00000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:17:31 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481269, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:17:31 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x1, 0xb6, 0x7}, 0x4}, 0x20, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) [ 1828.056179] loop0: detected capacity change from 0 to 3072 [ 1828.058286] audit: type=1326 audit(1749460651.790:2590): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10527 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1828.115186] audit: type=1326 audit(1749460651.796:2591): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10527 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1828.124244] EXT4-fs (loop0): Can't read superblock on 2nd try 09:17:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:17:31 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc048126c, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1828.157430] audit: type=1326 audit(1749460651.796:2592): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10527 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1828.160870] audit: type=1326 audit(1749460651.796:2593): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10527 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1828.164627] audit: type=1326 audit(1749460651.796:2594): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10527 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1828.168965] audit: type=1326 audit(1749460651.796:2595): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10527 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:17:31 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:17:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:17:31 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) 09:17:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xf00}) 09:17:31 executing program 5: sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2068f2834d9b152b620200000313bdb6c1207eb153ea9bf3c691e383e4bc6311e32429e77d0d4181630eb5d4b5ae1ed95942b0a545a77baff49fd26ac0c86051c7b4a3f6eec8c209d6718900c06496b7ef022b5d5908358dd357c1e30b5fd343da772bb7c00b13c3328ea081bfc84e11afc9326b5bc69a2f4140279f74362a1c07143b1c83d4919da0f320ac7e6289009a1baaa1abae99965d5e7ba32e8d90cdf8d0d27e128fc85e0c32e82b603a5cdd4347b42d67aa5775768490dce9fe3ef672e2818f0edc4c93f1d1bd5b76e44afcddfa5c67b9ab0000000080000000a0b6d3b570dc1376000000000000000000000000c39d4369fc", @ANYRES16=0x0, @ANYBLOB="080027bd7000fbdbdf251c0000000c009900ce00000057000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c480) set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:17:32 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000003000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1828.246108] loop0: detected capacity change from 0 to 3072 [ 1828.273317] EXT4-fs (loop0): Can't read superblock on 2nd try [ 1828.279725] loop0: detected capacity change from 0 to 3072 [ 1828.282350] EXT4-fs (loop0): Can't read superblock on 2nd try 09:17:32 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:17:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:17:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:17:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x2000}) 09:17:45 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:17:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000009000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:17:45 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc048126f, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:17:45 executing program 3: fsync(0xffffffffffffffff) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:17:45 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x57000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xe, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1841.268133] loop0: detected capacity change from 0 to 3584 [ 1841.272455] EXT4-fs (loop0): Can't read superblock on 2nd try 09:17:45 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7, 0x80, 0x5, 0x7}, 0x3}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) [ 1841.285032] kauditd_printk_skb: 17 callbacks suppressed [ 1841.285053] audit: type=1326 audit(1749460665.075:2613): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10594 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1841.296779] audit: type=1326 audit(1749460665.075:2614): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10594 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1841.319155] loop0: detected capacity change from 0 to 3584 [ 1841.324140] audit: type=1326 audit(1749460665.099:2615): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10594 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1841.335665] EXT4-fs (loop0): Can't read superblock on 2nd try 09:17:45 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1ff, 0x82080) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1841.342199] audit: type=1326 audit(1749460665.099:2616): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10594 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:17:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000d000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1841.357088] audit: type=1326 audit(1749460665.099:2617): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10594 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:17:45 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481270, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1841.372029] audit: type=1326 audit(1749460665.100:2618): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10594 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1841.422860] audit: type=1326 audit(1749460665.100:2619): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10594 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:17:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1004, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:17:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:17:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x2830}) [ 1841.444274] audit: type=1326 audit(1749460665.100:2620): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10594 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:17:45 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1841.461209] loop0: detected capacity change from 0 to 4096 [ 1841.465590] audit: type=1326 audit(1749460665.100:2621): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10594 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1841.478075] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (1 blocks) [ 1841.485954] audit: type=1326 audit(1749460665.100:2622): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10594 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:17:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x101) set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000002c0)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/133, 0x85}], 0x4) 09:17:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000e000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:17:59 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:17:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x2838}) 09:17:59 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xac, 0x800000005, 0x5ce}, 0x2}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x3, 0x3}, 0x2}, 0x20, 0x1, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) 09:17:59 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481275, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:17:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1020, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:17:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1855.821118] loop0: detected capacity change from 0 to 4096 09:17:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000100bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1855.828711] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (1 blocks) [ 1855.869749] kauditd_printk_skb: 19 callbacks suppressed [ 1855.869764] audit: type=1326 audit(1749460679.660:2642): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10642 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1855.874481] audit: type=1326 audit(1749460679.660:2643): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10642 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1855.882461] loop0: detected capacity change from 0 to 4096 [ 1855.885726] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (1 blocks) [ 1855.886927] audit: type=1326 audit(1749460679.665:2644): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10642 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1855.915486] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1855.917715] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1855.918949] audit: type=1326 audit(1749460679.665:2645): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10642 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1855.936544] audit: type=1326 audit(1749460679.665:2646): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10642 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1855.939232] audit: type=1326 audit(1749460679.669:2647): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10642 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:17:59 executing program 5: set_robust_list(&(0x7f0000000a00)={0x0, 0x81, &(0x7f00000009c0)}, 0x18) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000680)={&(0x7f0000000640)}, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)}}, &(0x7f00000007c0)=0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000ddffff2d2f66696c653000"]) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x24, 0x1, 0xa7, 0x0, 0x2, 0x6, 0x1d, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x8}, 0x8, 0x1, 0x1f, 0x6, 0xf6a0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, r0, 0x2) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) get_robust_list(0xffffffffffffffff, &(0x7f0000000500)=&(0x7f00000004c0)={&(0x7f0000000400), 0x0, &(0x7f0000000480)={&(0x7f0000000440)}}, &(0x7f0000000540)=0x18) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) pread64(r5, &(0x7f0000000800)=""/133, 0x85, 0x1) perf_event_open(&(0x7f0000000940)={0x5, 0x80, 0x81, 0x3, 0x21, 0x7f, 0x0, 0x0, 0x8802, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000900), 0xa}, 0x0, 0x101, 0x231, 0x0, 0x81, 0x3, 0x8, 0x0, 0x26, 0x0, 0x9}, 0x0, 0x10, r2, 0xa) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000280)=""/89, 0x59}], 0x1) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000008c0)=0x5) [ 1855.972137] audit: type=1326 audit(1749460679.673:2648): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10642 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:17:59 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{0x45}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x20044800) 09:17:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x2840}) 09:17:59 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481278, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:17:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1100, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1855.981416] audit: type=1326 audit(1749460679.673:2649): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10642 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1855.985415] audit: type=1326 audit(1749460679.673:2650): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10642 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1855.988719] audit: type=1326 audit(1749460679.692:2651): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10642 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:17:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:17:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000200bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1856.043281] loop0: detected capacity change from 0 to 4096 [ 1856.052620] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1856.053759] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1856.071499] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (1 blocks) 09:17:59 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:18:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x2848}) 09:18:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000300bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:18:15 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xffffffff00000000) syz_open_dev$vcsa(&(0x7f0000000200), 0x8000, 0x482) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:18:15 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:18:15 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, 0x0, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:18:15 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) 09:18:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1500, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:18:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1871.374075] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1871.375384] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1871.399639] loop0: detected capacity change from 0 to 5120 [ 1871.407413] blktrace: Concurrent blktraces are not allowed on loop8 [ 1871.411312] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (1 blocks) [ 1871.421746] kauditd_printk_skb: 5 callbacks suppressed [ 1871.421758] audit: type=1326 audit(1749460695.205:2657): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10703 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1871.425778] audit: type=1326 audit(1749460695.212:2658): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10703 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1871.432712] audit: type=1326 audit(1749460695.220:2659): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10703 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:18:15 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6, 0xffffffff00000, 0x4, 0x10001}, 0x4}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:18:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000900bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1871.469315] loop0: detected capacity change from 0 to 5120 09:18:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x3028}) [ 1871.486990] audit: type=1326 audit(1749460695.223:2660): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10703 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1871.501036] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (1 blocks) [ 1871.507561] audit: type=1326 audit(1749460695.227:2661): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10703 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:18:15 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x3, 0x77, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x4, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xb, 0x24, 0x6, 0x0, 0x0, "30bf1162810a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1f, 0x9}, [@acm={0x4}, @obex={0x5, 0x24, 0x15, 0x7f}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0xa2, 0xfa, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x10}, @obex={0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x0, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x20, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x50, 0x4f, 0x66}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0xff, 0x8, 0x20, 0x10, 0x1f}, 0x66, &(0x7f00000005c0)={0x5, 0xf, 0x66, 0x2, [@ptm_cap={0x3}, @generic={0x5e, 0x10, 0xa, "23c853390ed6883b1c45e74609b61e0b4f66f1e2288e8cbb48968dae73297fcc6f9fc54dcbba0e03248f4e3093178c7f09d8d8ee8951d292789547a202711af45a2675d41dd9017a5e8c91a36d08c1b04b9f4dc30e8b71d62b3931"}]}, 0x3, [{0xc9, &(0x7f0000000640)=@string={0xc9, 0x3, "f49333c68eff334e8a80930aa08d92e532f2bb7f9bf9dde7b1e46398bad0e650f958cbeaa8941b679a68d355026b467bb771f31f86749701a14e35d1e50c5703abae0682475d887cd526eb0520b1ca09b04b8cc7b51002945461e4841a16e6ec267dbc60d7bb8bc51002aa915199458661495b84322dea691b4992efa8f9a29e9bf68f478bcd64152211778576eb344d666b750b5a15d5a2f40b162c1307e19db47422f72d3d019c66469b234b8470e262f5155317ed79a1192de55cb88f713cc0af4540bb027d"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_control_io(r0, &(0x7f0000000980)={0x2c, &(0x7f0000000800)={0x40, 0x10, 0x67, {0x67, 0x30, "f8b9c4a7bb95312b8723aa969454dd9a0bc4dfcd3de0f3f8ba0ac77a5799710ad17245c2ac8cc92aa7304ce2708cf473cd8c3de3c0289870103be6502e34c3ffb4299cf914656db61ad29a6de24ee033edc477e6786317c3e4a924e2fc13c85981e3aced04"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f00000008c0)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xd, 0x2, 0xfff}, @wireless={0xb, 0x10, 0x1, 0x0, 0x10, 0x2, 0x2, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f09d9d5886ba4ba60c8dd13c8bcc46b7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x80, 0x81, 0x9}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x2, 0x20, 0x4, "a927e04d", "e0ce3766"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0x20, 0x4, 0x4, 0x1, 0x6}}}, &(0x7f0000000dc0)={0x84, &(0x7f00000009c0)={0x0, 0x5, 0x10, "20b548f616cf11303c470377f21c8b13"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000ac0)={0x20, 0x0, 0x8, {0x140, 0x20, [0xff00]}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "70f8"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "8d98"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0xa5}}) set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f00)=""/110, 0x6e}, {&(0x7f0000000f80)=""/201, 0xc9}], 0x2, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000001240)=[{&(0x7f0000001180)=""/139, 0x8b}], 0x1}}], 0x2, 0x0, &(0x7f0000001300)={0x0, 0x989680}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001340), 0x202480, 0x0) perf_event_open(&(0x7f0000000e80)={0x3, 0x80, 0x9, 0xe1, 0x3, 0x0, 0x0, 0x3, 0xa01, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x1ff, 0xe9c}, 0x4, 0x8, 0x2b, 0x2, 0x8000, 0x5, 0x1cb2, 0x0, 0x401, 0x0, 0x7}, r2, 0x1, r3, 0x8) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) get_robust_list(0xffffffffffffffff, &(0x7f0000000480)=&(0x7f0000000440)={&(0x7f0000000280)={&(0x7f0000000200)}, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)}}, &(0x7f00000004c0)=0x18) readv(r4, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1871.513718] udc-core: couldn't find an available UDC or it's busy [ 1871.514561] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1871.519785] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1871.521015] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:18:15 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1871.535132] audit: type=1326 audit(1749460695.227:2662): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10703 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:18:15 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, 0x0, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1871.539247] audit: type=1326 audit(1749460695.227:2663): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10703 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1871.553093] audit: type=1326 audit(1749460695.227:2664): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10703 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:18:15 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000240)={{0x2e, @empty, 0x4e21, 0x3, 'wlc\x00', 0x0, 0x9, 0x3c}, {@private=0xa010101, 0x4e23, 0x2, 0x1, 0x0, 0x81}}, 0x44) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)="4cf2678298707f730553f934a687e25a3b7e6fce82c0d65b312aefb983d9026aa983d851c71dec9f6f75411fe03b8df516981afd98478155d2397cc32ce3a24342ca9bc5ecffb831b1cf1af8cf573b51362891419e271a1341a591942df52d5bdcb892e4ea24", 0x66}, 0x68) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4f}, @void, @val={0xc, 0x99, {0x1ff, 0x3c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x10) [ 1871.592560] audit: type=1326 audit(1749460695.228:2665): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10703 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1871.608567] audit: type=1326 audit(1749460695.228:2666): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10703 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1871.615151] blktrace: Concurrent blktraces are not allowed on loop8 [ 1872.098967] udc-core: couldn't find an available UDC or it's busy [ 1872.100752] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1886.072011] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s 09:18:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x3828}) 09:18:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000d00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:18:29 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x8, &(0x7f0000000180)={&(0x7f0000000600)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000400)={&(0x7f0000000280)={&(0x7f0000000200)}, 0x1, &(0x7f00000002c0)}, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) get_robust_list(r1, &(0x7f0000000580)=&(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)}}, &(0x7f00000005c0)=0x18) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:18:29 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, 0x0, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:18:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:18:29 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:18:29 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{0x45}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x9084}, 0x20) 09:18:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1886.073175] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1886.111610] loop0: detected capacity change from 0 to 8192 [ 1886.115987] kauditd_printk_skb: 16 callbacks suppressed [ 1886.116001] audit: type=1326 audit(1749460709.905:2683): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10747 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1886.125745] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (2 blocks) [ 1886.125867] blktrace: Concurrent blktraces are not allowed on loop8 09:18:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000e00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1886.131451] audit: type=1326 audit(1749460709.905:2684): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10747 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1886.150788] audit: type=1326 audit(1749460709.905:2685): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10747 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:18:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x4000}) 09:18:29 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1886.164641] loop0: detected capacity change from 0 to 8192 [ 1886.168026] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (2 blocks) 09:18:29 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) [ 1886.192440] audit: type=1326 audit(1749460709.906:2686): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10747 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:18:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2010, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1886.210662] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1886.212316] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1886.217975] audit: type=1326 audit(1749460709.906:2687): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10747 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:18:30 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000200), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80000001}, 0x0, 0x0, 0x800000, 0x3, 0x3, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0xb) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1886.242141] audit: type=1326 audit(1749460709.906:2688): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10747 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:18:30 executing program 3: rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0xfffffffffffffffe, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2, 0xdeb, 0x100000000, 0x20}, 0x2}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 09:18:30 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x9, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:18:30 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000ffffff0f00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1886.257367] audit: type=1326 audit(1749460709.907:2689): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10747 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1886.308208] audit: type=1326 audit(1749460709.907:2690): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10747 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1886.323405] audit: type=1326 audit(1749460709.907:2691): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10747 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1886.326312] loop0: detected capacity change from 0 to 8192 [ 1886.336218] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (2 blocks) [ 1886.357181] blktrace: Concurrent blktraces are not allowed on loop8 09:18:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1886.361722] audit: type=1326 audit(1749460709.907:2692): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10747 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:18:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1900.555912] loop0: detected capacity change from 0 to 11776 09:18:44 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:18:44 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x80000000, 0x18, 0x25c}, 0x4}, 0x20, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:18:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2e00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:18:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000fffffff500bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:18:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x4028}) 09:18:44 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x2, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1100000000000}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:18:44 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1900.582758] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (2 blocks) [ 1900.587777] blktrace: Concurrent blktraces are not allowed on loop8 [ 1900.603415] kauditd_printk_skb: 17 callbacks suppressed [ 1900.603437] audit: type=1326 audit(1749460724.394:2710): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1900.619054] loop0: detected capacity change from 0 to 11776 [ 1900.622408] audit: type=1326 audit(1749460724.403:2711): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1900.628496] audit: type=1326 audit(1749460724.405:2712): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1900.640921] audit: type=1326 audit(1749460724.406:2713): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:18:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000fffffff00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1900.676482] audit: type=1326 audit(1749460724.467:2714): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1900.680471] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (2 blocks) [ 1900.687407] audit: type=1326 audit(1749460724.467:2715): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1900.700148] audit: type=1326 audit(1749460724.467:2716): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1900.715293] audit: type=1326 audit(1749460724.468:2717): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1900.720573] audit: type=1326 audit(1749460724.468:2718): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1900.727312] audit: type=1326 audit(1749460724.468:2719): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:18:44 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x38, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:18:44 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x3, 0xfff}, 0x2}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 09:18:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x4828}) 09:18:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1900.854327] blktrace: Concurrent blktraces are not allowed on loop8 09:18:44 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:18:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:18:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:18:59 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x48, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:18:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000f5ffffff00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:18:59 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:18:59 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f0000000100)={&(0x7f00000002c0)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000400)}}, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000280), 0x346f, 0x365683) readv(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) ftruncate(0xffffffffffffffff, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r6, 0x0, 0x0, 0x0, 0x102, 0x0, {0x0, r7}}, 0xfffffffb) 09:18:59 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x4c71, 0x7}, 0x7}, 0x20, 0x0, 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002800)={{0x1, 0x1, 0x18, r0, {0xb740}}, './file1\x00'}) execveat(r2, &(0x7f0000002840)='./file1\x00', &(0x7f0000002940)=[&(0x7f0000002880)='(+#\x00', &(0x7f00000028c0)='nl80211\x00', &(0x7f0000002900)='nl80211\x00'], &(0x7f0000002a40)=[&(0x7f0000002980)='nl80211\x00', &(0x7f00000029c0)='6$%)m\'#:\x00', &(0x7f0000002a00)='[\x00'], 0x1000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 09:18:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xa0000}) 09:18:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1915.422142] blktrace: Concurrent blktraces are not allowed on loop8 [ 1915.426797] loop0: detected capacity change from 0 to 16384 [ 1915.458260] kauditd_printk_skb: 18 callbacks suppressed [ 1915.458280] audit: type=1326 audit(1749460739.249:2738): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10853 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1915.471675] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (4 blocks) [ 1915.488351] audit: type=1326 audit(1749460739.249:2739): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10853 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1915.500878] audit: type=1326 audit(1749460739.249:2740): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10853 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:18:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000002000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1915.513833] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further [ 1915.526773] audit: type=1326 audit(1749460739.256:2741): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10853 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:18:59 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1915.584311] audit: type=1326 audit(1749460739.257:2742): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10853 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1915.637676] audit: type=1326 audit(1749460739.257:2743): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10853 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:18:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x3ffff8}) 09:18:59 executing program 3: rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x84, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) [ 1915.676884] audit: type=1326 audit(1749460739.258:2744): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10853 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:18:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000003000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:18:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:18:59 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4c, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1915.718074] audit: type=1326 audit(1749460739.258:2745): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10853 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:18:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:18:59 executing program 5: set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) readv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/12, 0x2}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f0000000280)=""/87, 0x57}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000001540)=""/93, 0x5d}, {&(0x7f00000015c0)=""/196, 0xc4}], 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x60000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendfile(r2, r3, 0x0, 0xfffffffffffffffa) perf_event_open(&(0x7f0000001740)={0x4, 0x80, 0x10, 0x53, 0xfd, 0x44, 0x0, 0xc9, 0x3246c, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x10000, 0x1, 0x1, 0x5, 0x81, 0x8f1, 0x8, 0x0, 0x4, 0x0, 0xff}, 0x0, 0xf, 0xffffffffffffffff, 0x10) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 1915.745230] audit: type=1326 audit(1749460739.258:2746): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10853 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1915.769476] audit: type=1326 audit(1749460739.259:2747): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10853 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1915.813342] loop0: detected capacity change from 0 to 24576 [ 1915.830777] blktrace: Concurrent blktraces are not allowed on loop8 [ 1915.860922] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (6 blocks) [ 1915.909831] loop0: detected capacity change from 0 to 24576 [ 1915.916282] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (6 blocks) 09:19:13 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:19:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x400000}) 09:19:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:19:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:19:13 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000280)="6cc4945dcdae46916730c9d455515180fa874e28b3089700fb9174aaf19570814c46925e80bb10f710ee21d1e18e438d396101a8fe66f59bec5f11c9abe29ab395ba0abe14a783187b8e12103bd81b04e35849861dc969fb4bb5", 0x5a) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0xffffffffffffffff, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0x890, 0x4}, 0x0, 0xfffffffffffffffd, r0, 0x1) syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:19:13 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x7f, 0x31, 0x1f}, 0xf}, 0x20, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x400000000000}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f19670b2c54e09b9efcf868b0279cf29cdfc9c72dc78e6f6205c0f661c5391b885034eeac7144b5917b15eb16de2e7fb751a72c5b77f81077395ab"]) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES64=r1, @ANYRESDEC=r4, @ANYRES32=r2, @ANYBLOB="c796371a810b5108739ed34335dd4c0863c4f41a75ae85adcca9250936a003f9580ed967c2ee993d27a369ab0f57882086f24ac4b119e3cc1fe748fc6861b6ad58a0c9afa0622893a1f28cedfa6a4f17997e6bd286821edd6c855d89c2de9016d44096da7201dd0758940f7773", @ANYBLOB="a75dcc98de2de616e543e5bb6585d8e8beaa83ac7a499497832802d9afa503371085499d518e93ad34da4b8c23e8b5ae5fc52f25e04c4465b53da68e36cef7ef5514150710d6e891e007e4eb09210969b81f3c9507c7f5641c40a93334813c2873af5d7e2c3345aa1210aba94d70421be46fbaaabf7ddcdeb1dc2b915b1aac1dfd22686b7760f3322473565c63c0db7154c46a2b5afad595b00a5a05779df9e6070aeba5a890be1b200e84788c0a3eb96ede0440266072a0eec13c6fa5cc44f3077a878b7e7ec3b5127a0da6df19ae69009617a6d237ed6c6c6444336328a81b8d3488ad9ec713ec2e359a", @ANYBLOB="38aee75e71479aaf43bcf74a5b18810af5dbeeac886a7d73360e0436d8a4edfaecd26cbad0ee8fc98c741f6a9ca394f1c45676ea8b4fb8c06b421240dc6f937b59c706547fbba70d8ae88b69851fbc188ada0714856983dc100e79645b4ee87e3eb37fc62c6257a14fdf1729f0ed41fb36691f8d095cb68f1c0bcac2f49e56882af0a5e5b89b7ee73e57fb64977acd388760dbc99bdb687c0d2e6f68187427eab6210aa7d62217c3287c8afee6550ea7f2d1d9a1a53886df2d02a9d90b457be7288753d37b04dd887f9bd0be098f7b49bd19445285666a386a4c74962e10be7740a81e1224bfff1986abce98962f161fa78162"]) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x9, 0x7ff}, 0x1}, 0x20, 0x1, 0x0) 09:19:13 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x68, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:19:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000009000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1929.504627] EXT4-fs warning (device sda): ext4_group_extend:1805: can't shrink FS - resize aborted [ 1929.506003] blktrace: Concurrent blktraces are not allowed on loop8 09:19:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000d000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1929.547713] loop0: detected capacity change from 0 to 60416 [ 1929.566966] kauditd_printk_skb: 17 callbacks suppressed [ 1929.566976] audit: type=1326 audit(1749460753.357:2765): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1929.570154] audit: type=1326 audit(1749460753.357:2766): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1929.576511] audit: type=1326 audit(1749460753.357:2767): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1929.579029] audit: type=1326 audit(1749460753.357:2768): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1929.591344] audit: type=1326 audit(1749460753.357:2769): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1929.595241] audit: type=1326 audit(1749460753.365:2770): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1929.598022] audit: type=1326 audit(1749460753.366:2771): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1929.600590] audit: type=1326 audit(1749460753.366:2772): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:19:13 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1929.605418] audit: type=1326 audit(1749460753.366:2773): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1929.608355] audit: type=1326 audit(1749460753.366:2774): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10908 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1929.633099] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (14 blocks) 09:19:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x1000000}) [ 1929.639454] EXT4-fs warning (device sda): ext4_group_extend:1805: can't shrink FS - resize aborted 09:19:13 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) alarm(0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:19:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xff0f, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1929.823842] loop0: detected capacity change from 0 to 65024 [ 1929.846054] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1929.877180] loop0: detected capacity change from 0 to 65024 [ 1929.903544] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (15 blocks) 09:19:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:19:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000e000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:19:35 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:19:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:19:35 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6c, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:19:35 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x43, 0x8, 0x1}}, 0x20, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:19:35 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) alarm(0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:19:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x2000000}) [ 1951.432852] loop0: detected capacity change from 0 to 262144 [ 1951.458809] blktrace: Concurrent blktraces are not allowed on loop8 [ 1951.465469] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1951.467600] EXT4-fs (loop0): group descriptors corrupted! [ 1951.486146] kauditd_printk_skb: 22 callbacks suppressed [ 1951.486166] audit: type=1326 audit(1749460775.248:2797): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10949 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1951.492677] audit: type=1326 audit(1749460775.274:2798): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10949 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1951.497738] audit: type=1326 audit(1749460775.275:2799): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10949 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1951.515387] audit: type=1326 audit(1749460775.275:2800): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10949 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1951.520234] loop0: detected capacity change from 0 to 262144 [ 1951.522121] audit: type=1326 audit(1749460775.304:2801): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10949 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1951.527172] audit: type=1326 audit(1749460775.305:2802): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10949 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1951.536268] audit: type=1326 audit(1749460775.305:2803): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10949 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:19:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000030000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1951.551032] audit: type=1326 audit(1749460775.305:2804): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10949 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1951.556320] audit: type=1326 audit(1749460775.306:2805): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10949 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1951.561392] audit: type=1326 audit(1749460775.319:2806): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10949 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1951.598973] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1951.601195] EXT4-fs (loop0): group descriptors corrupted! 09:19:35 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x74, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:19:35 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000005e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:19:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x3000000}) 09:19:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg$inet6(r1, &(0x7f0000004600)=[{{&(0x7f0000000080)={0xa, 0x4e2b, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x63}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRESHEX], 0x28}}], 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x22, r3}) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:19:35 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:19:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:19:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000090000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:19:35 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) syz_open_dev$vcsa(&(0x7f0000000200), 0x0, 0xb766b99ab0a82754) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:19:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1951.815100] blktrace: Concurrent blktraces are not allowed on loop8 09:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:19:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x4000000}) 09:19:50 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x0, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:19:50 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:19:50 executing program 3: rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x26) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 09:19:50 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000d0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:19:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:19:50 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x4) [ 1967.054709] blktrace: Concurrent blktraces are not allowed on loop8 09:19:50 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000e0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1967.102847] loop0: detected capacity change from 0 to 786432 [ 1967.139450] kauditd_printk_skb: 17 callbacks suppressed [ 1967.139469] audit: type=1326 audit(1749460790.930:2824): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11008 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1967.146012] audit: type=1326 audit(1749460790.930:2825): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11008 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1967.149462] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1967.152998] EXT4-fs (loop0): group descriptors corrupted! [ 1967.166977] audit: type=1326 audit(1749460790.957:2826): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11008 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1967.179504] audit: type=1326 audit(1749460790.970:2827): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11008 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:19:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x8000000}) [ 1967.189539] audit: type=1326 audit(1749460790.970:2828): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11008 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1967.196422] loop0: detected capacity change from 0 to 786432 [ 1967.205239] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1967.207317] EXT4-fs (loop0): group descriptors corrupted! [ 1967.220157] audit: type=1326 audit(1749460790.971:2829): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11008 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:19:51 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x900, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:19:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1967.264044] audit: type=1326 audit(1749460790.971:2830): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11008 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:19:51 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000400)=""/143, 0x8f}], 0x4) [ 1967.291975] audit: type=1326 audit(1749460790.971:2831): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11008 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1967.312296] loop0: detected capacity change from 0 to 16777216 [ 1967.317114] audit: type=1326 audit(1749460790.972:2832): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11008 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:19:51 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x0, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1967.331141] audit: type=1326 audit(1749460790.972:2833): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11008 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:19:51 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000001bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1967.352608] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1967.354837] EXT4-fs (loop0): group descriptors corrupted! 09:19:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 1967.413381] loop0: detected capacity change from 0 to 16777216 [ 1967.419081] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1967.421316] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1967.437944] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1967.440066] EXT4-fs (loop0): group descriptors corrupted! 09:19:51 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r1}}}], 0x28}}], 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000004600)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r4}}}], 0x28}}], 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r5, &(0x7f0000004600)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r7}}}], 0x28}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r10, &(0x7f0000004600)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r12}}}], 0x28}}], 0x2, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000200)={0x9ec, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffff55}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x5, 0x3, 0x3f9d}, {0x1, 0x8, 0x5, 0x9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa6ee}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0xe9, 0x20, 0x5}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x94, 0x20, 0x387c}, {0x5, 0x3f, 0x8, 0x5}]}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x534}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8f}}, {0x8}}}]}}]}, 0x9ec}, 0x1, 0x0, 0x0, 0x20000891}, 0x488c4) [ 1981.398166] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1981.399744] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:20:05 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7, 0x7, 0x6}, 0x1}, 0x20, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:20:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:20:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x9000000}) 09:20:05 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000002bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:20:05 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x0, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:20:05 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10800, 0x4e) close(r1) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:20:05 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa00, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:20:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1981.421245] blktrace: Concurrent blktraces are not allowed on loop8 [ 1981.423540] kauditd_printk_skb: 16 callbacks suppressed [ 1981.423551] audit: type=1326 audit(1749460805.214:2850): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11067 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1981.427762] audit: type=1326 audit(1749460805.218:2851): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11067 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:20:05 executing program 3: rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x4000000000000000, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x80a}}, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40009}, 0x4004000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000080)) sendmsg$802154_raw(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14, &(0x7f0000000340)={&(0x7f00000002c0)="b56d065685fcf4f6e98e85b384b6989185f4faffd579ffece7445b4236054e8af1287233a0fbd7fb504289daf112f153bb44d2712f927c42c3c62ddecbd391ca677beab8df64ad388f5c32ae15ad4d1de7c726e5926e5ee1f71236af34c64a472efbb87aa1", 0x65}, 0x1, 0x0, 0x0, 0x48001}, 0x40890) [ 1981.440129] audit: type=1326 audit(1749460805.229:2852): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11067 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1981.445405] loop0: detected capacity change from 0 to 33554432 [ 1981.455495] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1981.456641] EXT4-fs (loop0): group descriptors corrupted! [ 1981.484213] audit: type=1326 audit(1749460805.234:2853): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11067 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1981.490277] audit: type=1326 audit(1749460805.234:2854): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11067 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:20:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xd000000}) [ 1981.496962] audit: type=1326 audit(1749460805.234:2855): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11067 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:20:05 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000003bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1981.501384] loop0: detected capacity change from 0 to 33554432 [ 1981.506236] audit: type=1326 audit(1749460805.234:2856): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11067 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:20:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:20:05 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000200)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:20:05 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2000, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1981.521741] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1981.522919] EXT4-fs (loop0): group descriptors corrupted! 09:20:05 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x0, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1981.583991] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1981.585168] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1981.587774] audit: type=1326 audit(1749460805.258:2857): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11067 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1981.614607] audit: type=1326 audit(1749460805.258:2858): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11067 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:20:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xe000000}) [ 1981.641704] blktrace: Concurrent blktraces are not allowed on loop8 09:20:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 1981.650987] audit: type=1326 audit(1749460805.258:2859): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11067 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1981.710506] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1981.711682] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:20:05 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000009bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 1981.765642] loop0: detected capacity change from 0 to 50331648 [ 1981.796100] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1981.797274] EXT4-fs (loop0): group descriptors corrupted! [ 1981.805495] loop0: detected capacity change from 0 to 50331648 [ 1981.810261] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1981.811403] EXT4-fs (loop0): group descriptors corrupted! 09:20:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:20:21 executing program 3: syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xe0, 0x80, [{{0x9, 0x4, 0x0, 0x41, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x2, 0x3f, 0x1, {0x22, 0x40c}}, {{{0x9, 0x5, 0x81, 0x3, 0x28, 0x7f, 0x6, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x8d, 0xfb, 0x3}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x0, 0x20, 0x3, 0x40, 0xfb}, 0x4c, &(0x7f0000000100)={0x5, 0xf, 0x4c, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x5, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0xff, 0x6, 0x2}, @generic={0x33, 0x10, 0x2, "2a6096d64d8577e8ca3b8f7d16d8bb691de1b1f7bd7e41c8770fad47ccc2bc88e35643098cd1db784ec3219e546e3072"}]}}) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:20:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xf000000}) 09:20:21 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000dbbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:20:21 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x1bc) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:20:21 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3800, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:20:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:20:21 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x0, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1997.581490] loop0: detected capacity change from 0 to 67108864 [ 1997.587171] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.588339] EXT4-fs (loop0): group descriptors corrupted! [ 1997.603754] loop0: detected capacity change from 0 to 67108864 [ 1997.607170] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.608290] EXT4-fs (loop0): group descriptors corrupted! [ 1997.615995] kauditd_printk_skb: 18 callbacks suppressed [ 1997.616036] audit: type=1326 audit(1749460821.406:2878): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11130 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1997.628963] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1997.631254] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1997.640709] audit: type=1326 audit(1749460821.418:2879): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11130 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1997.661267] audit: type=1326 audit(1749460821.418:2880): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11130 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:20:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:20:21 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4000, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1997.687778] audit: type=1326 audit(1749460821.419:2881): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11130 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1997.690680] audit: type=1326 audit(1749460821.441:2882): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11130 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 1997.693256] audit: type=1326 audit(1749460821.442:2883): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11130 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 1997.696101] audit: type=1326 audit(1749460821.446:2884): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11130 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1997.699298] audit: type=1326 audit(1749460821.447:2885): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11130 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1997.702298] audit: type=1326 audit(1749460821.447:2886): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11130 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1997.705704] audit: type=1326 audit(1749460821.448:2887): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11130 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 1997.728581] blktrace: Concurrent blktraces are not allowed on loop8 [ 1997.739573] loop0: detected capacity change from 0 to 83886080 [ 1997.750118] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.751391] EXT4-fs (loop0): group descriptors corrupted! 09:20:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x10000000}) 09:20:21 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000ebbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:20:21 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x40801, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x71c7, 0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2a4}, r1, 0x10, r0, 0x2) get_robust_list(r1, &(0x7f00000004c0)=&(0x7f0000000480)={&(0x7f00000002c0)={&(0x7f0000000040)}, 0x0, &(0x7f0000000440)={&(0x7f0000000400)}}, &(0x7f0000000500)=0x18) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000540), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) r5 = inotify_init() dup3(r4, r5, 0x80000) readv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:20:21 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x0, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1997.787788] loop0: detected capacity change from 0 to 83886080 [ 1997.796401] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.797577] EXT4-fs (loop0): group descriptors corrupted! 09:20:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:20:21 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 1997.869723] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1997.872015] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1997.925453] loop0: detected capacity change from 0 to 100663296 [ 1997.951625] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.952785] EXT4-fs (loop0): group descriptors corrupted! [ 1997.969453] loop0: detected capacity change from 0 to 100663296 [ 1997.973318] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.974476] EXT4-fs (loop0): group descriptors corrupted! 09:20:35 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) recvmmsg$unix(r0, &(0x7f0000005780)=[{{&(0x7f0000000380), 0x6e, &(0x7f00000029c0)=[{&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)}, {&(0x7f0000001540)=""/195, 0xc3}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f00000016c0)=""/82, 0x52}, {&(0x7f0000001740)=""/201, 0xc9}, {&(0x7f0000001840)=""/239, 0xef}, {&(0x7f0000001940)=""/104, 0x68}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0xa, &(0x7f0000002a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000002b80)=@abs, 0x6e, &(0x7f0000002c00), 0x0, &(0x7f0000002c40)}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002c80)=""/202, 0xca}], 0x1}}, {{&(0x7f0000002dc0)=@abs, 0x6e, &(0x7f0000003140)=[{&(0x7f0000002e40)=""/142, 0x8e}, {&(0x7f0000001500)=""/33, 0x21}, {&(0x7f0000002f40)=""/79, 0x4f}, {&(0x7f0000002fc0)=""/72, 0x48}, {&(0x7f0000003040)}, {&(0x7f0000003080)=""/121, 0x79}, {&(0x7f0000003100)=""/13, 0xd}], 0x7, &(0x7f00000031c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f00000032c0), 0x6e, &(0x7f0000003600)=[{&(0x7f0000003340)=""/27, 0x1b}, {&(0x7f0000003380)=""/74, 0x4a}, {&(0x7f0000003400)=""/64, 0x40}, {&(0x7f0000003440)=""/11, 0xb}, {&(0x7f0000003480)=""/89, 0x59}, {&(0x7f0000003500)=""/254, 0xfe}], 0x6, &(0x7f0000003680)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003740)=""/111, 0x6f}, {&(0x7f00000037c0)=""/171, 0xab}, {&(0x7f0000003880)=""/12, 0xc}, {&(0x7f00000038c0)=""/170, 0xaa}, {&(0x7f0000003980)=""/168, 0xa8}, {&(0x7f0000003a40)=""/133, 0x85}], 0x6, &(0x7f0000003b80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003c00), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003c80)=""/172, 0xac}, {&(0x7f0000003d40)=""/7, 0x7}, {&(0x7f0000003d80)=""/134, 0x86}, {&(0x7f0000003e40)=""/3, 0x3}, {&(0x7f0000003e80)=""/31, 0x1f}], 0x5, &(0x7f0000003f40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{&(0x7f00000040c0), 0x6e, &(0x7f0000004200)=[{&(0x7f0000004140)=""/113, 0x71}, {&(0x7f00000041c0)=""/58, 0x3a}], 0x2, &(0x7f0000004240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f00000043c0)=""/99, 0x63}], 0x1, &(0x7f0000004480)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000044c0)=@abs, 0x6e, &(0x7f0000005640)=[{&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000005540)}, {&(0x7f0000005580)=""/164, 0xa4}], 0x3, &(0x7f0000005680)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}], 0xa, 0x40000100, &(0x7f0000005a00)={0x77359400}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, 'nl80211\x00'}}], [{@obj_type={'obj_type', 0x3d, '\\$!!,%:-/g,)-:*\''}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@uid_eq={'uid', 0x3d, r3}}]}}) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 09:20:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:20:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 2011.690918] loop0: detected capacity change from 0 to 117440512 [ 2011.700836] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2011.703043] EXT4-fs (loop0): group descriptors corrupted! 09:20:35 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2, 0x81, 0x0, 0x10, 0x0, 0x3, 0x41001, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x40000, 0x2, 0xb02d, 0x4, 0xff, 0x5, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x5) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) dup3(r1, r1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:20:35 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4800, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:20:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x20000000}) 09:20:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000ffffff0fbbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:20:35 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 2011.729681] loop0: detected capacity change from 0 to 117440512 [ 2011.738804] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2011.740922] EXT4-fs (loop0): group descriptors corrupted! [ 2011.769426] blktrace: Concurrent blktraces are not allowed on loop8 09:20:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 2011.821519] kauditd_printk_skb: 31 callbacks suppressed [ 2011.821534] audit: type=1326 audit(1749460835.612:2919): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11194 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2011.835024] audit: type=1326 audit(1749460835.612:2920): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11194 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2011.857373] audit: type=1326 audit(1749460835.646:2921): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11194 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2011.876240] audit: type=1326 audit(1749460835.646:2922): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11194 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2011.884516] loop0: detected capacity change from 0 to 134217728 [ 2011.893792] audit: type=1326 audit(1749460835.646:2923): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11194 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2011.904540] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2011.905636] audit: type=1326 audit(1749460835.647:2924): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11194 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2011.906148] EXT4-fs (loop0): group descriptors corrupted! [ 2011.918775] audit: type=1326 audit(1749460835.647:2925): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11194 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2011.938309] audit: type=1326 audit(1749460835.648:2926): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11194 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2011.957016] audit: type=1326 audit(1749460835.665:2927): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11194 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2011.974688] audit: type=1326 audit(1749460835.665:2928): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11194 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:20:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:20:50 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000fffffff5bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:20:50 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:20:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x30280000}) 09:20:50 executing program 3: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}, 0x20, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:20:50 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4c00, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:20:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:20:50 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x40801, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x71c7, 0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2a4}, r1, 0x10, r0, 0x2) get_robust_list(r1, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x40801, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x71c7, 0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2a4}, r5, 0x10, r4, 0x2) r6 = perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x6, 0x76, 0x41, 0x5, 0x0, 0x4, 0x8120, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x100000001}, 0x45822, 0x6894, 0x400, 0x4, 0x8, 0x9, 0x9, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x2, r2, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x3, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x2226, 0x2, 0x1, 0x4, 0x941, 0xffffb988, 0x20, 0x0, 0x7, 0x0, 0x8}, r5, 0x0, r6, 0x8) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) readv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:20:50 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000fffffffbbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2026.866804] blktrace: Concurrent blktraces are not allowed on loop8 [ 2026.898808] kauditd_printk_skb: 6 callbacks suppressed [ 2026.898828] audit: type=1326 audit(1749460850.683:2935): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2026.903171] loop0: detected capacity change from 0 to 135266304 09:20:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x38280000}) [ 2026.939620] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2026.941805] EXT4-fs (loop0): group descriptors corrupted! [ 2026.947652] audit: type=1326 audit(1749460850.689:2936): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:20:50 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:20:50 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 2026.987065] audit: type=1326 audit(1749460850.697:2937): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2027.010007] audit: type=1326 audit(1749460850.697:2938): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2027.021388] loop0: detected capacity change from 0 to 135266304 [ 2027.029304] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2027.031437] EXT4-fs (loop0): group descriptors corrupted! 09:20:50 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 2027.045318] audit: type=1326 audit(1749460850.699:2939): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2027.071052] audit: type=1326 audit(1749460850.707:2940): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2027.074414] audit: type=1326 audit(1749460850.707:2941): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2027.077707] audit: type=1326 audit(1749460850.707:2942): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2027.082480] audit: type=1326 audit(1749460850.709:2943): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:20:50 executing program 3: rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='syztnl2\x00', &(0x7f00000000c0)='%)@,&#\x00', 0x0) close(r0) r1 = fsmount(r0, 0x0, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r6}}, 0x7ff) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x4007, @fd_index=0x1, 0x7ec, 0x0, 0x0, 0x10, 0x0, {0x2, r6}}, 0x0) accept$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'veth0\x00'}) 09:20:50 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6800, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:20:50 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000f5ffffffbbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2027.086061] audit: type=1326 audit(1749460850.712:2944): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2027.120648] blktrace: Concurrent blktraces are not allowed on loop8 09:20:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:20:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:20:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x40000000}) [ 2027.191266] loop0: detected capacity change from 0 to 135266304 09:20:50 executing program 5: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x40801, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x71c7, 0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2a4}, r3, 0x10, r2, 0x2) pidfd_open(r3, 0x0) [ 2027.220641] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2027.221828] EXT4-fs (loop0): group descriptors corrupted! 09:21:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x40280000}) 09:21:06 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) recvmsg$unix(r1, &(0x7f0000000600)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000480)=""/19, 0x13}, {&(0x7f00000004c0)=""/10, 0xa}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000884f8e3f68b9d9260002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x88}, 0x10040) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x80, 0x6, 0x7f, 0x3f, 0x0, 0x8, 0xa8332, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000200)}, 0x4000, 0xfff, 0xb75, 0x0, 0x170e3e90, 0x1, 0x6, 0x0, 0x2, 0x0, 0x3ff}, r2, 0x10, r1, 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40086607, &(0x7f0000000080)) getpeername$unix(r3, &(0x7f0000000640)=@abs, &(0x7f00000006c0)=0x6e) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:21:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:21:06 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x10001, 0x800, 0x10004}, 0x6}, 0x20, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5, 0x4}, 0x3}, 0x20, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) rseq(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x6, 0xfffffffffffff9f7, 0x7fffffff}, 0x5}, 0x20, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x44000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x140, r0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x28}}}}, [@NL80211_ATTR_VENDOR_DATA={0x3d, 0xc5, "650ddd9fc50d427dc84ae312e68353e52e2bc3479a22d69bee5d9af2835aba41167369e36332246f2bb7f86ab875a54e52c2583ca7704d5333"}, @NL80211_ATTR_VENDOR_DATA={0x74, 0xc5, "62c79d24a7d2d9bcdc2f14707da49ed888e7dd89eb2113996dca76a3bd8cf0d96113ad27d9daf3a62d1611c0d9fef09c0b72f1e799c6c6aa165e7b9a0119f1c2b43688c7d402788b5d567eaf97cefd61dbd18eb5cab43982516440d82a5ef4afa295065005b41ff23928d8ea3f78c3d9"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x52, 0xc5, "818cc1e9d1ee7b85826f3761e5f4206ee20c42a42e1f1a5f2eb81aeca6c3666b63c21567b5e54a1d758842e13bb098bd8ea1daf7240d537c544b7cfe958e25db95379b678c870bc2b676fd8b1f6b"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x10) rseq(&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x10000, 0x1, 0x9}}, 0x20, 0x0, 0x0) 09:21:06 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000020000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:21:06 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6c00, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:21:06 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:21:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 2042.345392] loop0: detected capacity change from 0 to 135266304 09:21:06 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000030000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2042.429648] blktrace: Concurrent blktraces are not allowed on loop8 [ 2042.432859] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2042.435058] EXT4-fs (loop0): group descriptors corrupted! [ 2042.448812] kauditd_printk_skb: 32 callbacks suppressed [ 2042.448832] audit: type=1326 audit(1749460866.239:2977): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11298 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2042.459061] audit: type=1326 audit(1749460866.248:2978): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11298 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:21:06 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000004600)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=r2, @ANYBLOB="00020000"], 0x28}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x4, 0x40, 0x3, 0x43a3, 0x4, @private1, @private1, 0x80, 0x6, 0x3b27fb39, 0x800}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) [ 2042.483354] loop0: detected capacity change from 0 to 135266304 [ 2042.487992] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2042.489371] EXT4-fs (loop0): group descriptors corrupted! [ 2042.493473] audit: type=1326 audit(1749460866.249:2979): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11298 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2042.505648] audit: type=1326 audit(1749460866.276:2980): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11298 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2042.538342] audit: type=1326 audit(1749460866.287:2981): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11298 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:21:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:21:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x48280000}) 09:21:06 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0xfffffffffffffff9}, 0x45614, 0x0, 0x800000, 0x8, 0x0, 0xd0a8, 0x404, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 2042.562940] audit: type=1326 audit(1749460866.287:2982): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11298 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2042.566565] audit: type=1326 audit(1749460866.297:2983): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11298 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2042.591975] audit: type=1326 audit(1749460866.298:2984): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11298 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2042.592043] audit: type=1326 audit(1749460866.298:2985): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11298 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2042.592091] audit: type=1326 audit(1749460866.299:2986): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11298 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2042.592644] loop0: detected capacity change from 0 to 135266304 [ 2042.620625] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2042.622850] EXT4-fs (loop0): group descriptors corrupted! 09:21:22 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7400, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:21:22 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000090000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:21:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:21:22 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:21:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xf5ffffff}) 09:21:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:21:22 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000001640)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="566684134908f3085d88b07e941b8fca98000000080051000100000008001600", @ANYRES32, @ANYBLOB="416ca2f125acb790", @ANYRES32=0xee00, @ANYBLOB], 0x5c0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() lchown(&(0x7f0000000000)='./file0\x00', 0x0, r5) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={r3, r4, r5}, 0xc) r6 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x40801, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000400), 0x7}, 0x0, 0x1, 0x71c7, 0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2a4}, r6, 0x9, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x5, 0x13, 0x1f, 0x0, 0xfe6, 0x200, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0xffffffff80000001, 0x4}, 0xda20, 0x80000001, 0x0, 0x6, 0x8, 0xfffffffb, 0x45d8, 0x0, 0x8, 0x0, 0x200000000000004}, r6, 0xa, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r7, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:21:22 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:21:22 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000d0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2058.296346] loop0: detected capacity change from 0 to 135266304 [ 2058.306546] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2058.307774] EXT4-fs (loop0): group descriptors corrupted! [ 2058.337248] blktrace: Concurrent blktraces are not allowed on loop8 09:21:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xf8ff3f00}) [ 2058.362090] loop0: detected capacity change from 0 to 135266304 [ 2058.369720] kauditd_printk_skb: 4 callbacks suppressed [ 2058.369739] audit: type=1326 audit(1749460882.159:2991): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11337 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2058.389227] audit: type=1326 audit(1749460882.178:2992): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11337 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2058.409811] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2058.412034] EXT4-fs (loop0): group descriptors corrupted! [ 2058.428972] audit: type=1326 audit(1749460882.209:2993): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11337 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2058.432163] audit: type=1326 audit(1749460882.209:2994): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11337 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:21:22 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x2, 0x0) [ 2058.455027] audit: type=1326 audit(1749460882.231:2995): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11337 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:21:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 2058.465636] audit: type=1326 audit(1749460882.231:2996): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11337 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2058.468518] audit: type=1326 audit(1749460882.231:2997): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11337 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2058.471855] audit: type=1326 audit(1749460882.238:2998): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11337 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2058.474950] audit: type=1326 audit(1749460882.238:2999): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11337 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:21:22 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 2058.518453] audit: type=1326 audit(1749460882.238:3000): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11337 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:21:37 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:21:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10040000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:21:37 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x52c9f653, 0x4, 0x100000000}, 0x3}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:21:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:21:37 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a00, 0x100, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:21:37 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000, 0x402}, 0x64100, 0x0, 0x800, 0x5, 0x8, 0xfffffffe, 0x0, 0x0, 0x2}, r0, 0x5, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r7, 0x4) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r1, 0x0, {0x0, r2}, 0x9, 0x2, 0x1}, 0x6) readv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) set_robust_list(&(0x7f0000000400)={&(0x7f0000000200), 0xffff, &(0x7f00000002c0)={&(0x7f0000000280)}}, 0x18) 09:21:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xfdfdffff}) 09:21:37 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000e0000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2074.085532] blktrace: Concurrent blktraces are not allowed on loop8 [ 2074.090821] loop0: detected capacity change from 0 to 135266304 [ 2074.107898] kauditd_printk_skb: 18 callbacks suppressed [ 2074.107918] audit: type=1326 audit(1749460897.898:3019): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11370 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2074.120014] audit: type=1326 audit(1749460897.906:3020): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11370 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2074.127445] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 09:21:37 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000300bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2074.127456] EXT4-fs (loop0): group descriptors corrupted! [ 2074.163639] loop0: detected capacity change from 0 to 135266304 [ 2074.176211] audit: type=1326 audit(1749460897.919:3021): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11370 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2074.200576] audit: type=1326 audit(1749460897.921:3022): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11370 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2074.214699] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2074.216116] EXT4-fs (loop0): group descriptors corrupted! 09:21:38 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2074.246019] audit: type=1326 audit(1749460897.921:3023): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11370 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2074.266199] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2074.268466] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2074.273603] audit: type=1326 audit(1749460897.924:3024): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11370 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:21:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xffefffff}) 09:21:38 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x3, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2074.300007] audit: type=1326 audit(1749460897.924:3025): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11370 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2074.323162] audit: type=1326 audit(1749460897.924:3026): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11370 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:21:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000900bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:21:38 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x40801, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x71c7, 0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2a4}, r1, 0x10, r0, 0x2) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000480)={0x2, 0x4, 0x5, 0x6, r1}) set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r4 = accept4(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000200)=0x80, 0x800) fsetxattr$security_ima(r4, &(0x7f0000000400), &(0x7f0000000440)=@sha1={0x1, "90493adc35b7359b63f88d17baf226d24d3fbf24"}, 0x15, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000240)='\x00') readv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:21:38 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:21:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:21:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 2074.344099] blktrace: Concurrent blktraces are not allowed on loop8 [ 2074.350219] audit: type=1326 audit(1749460897.925:3027): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11370 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:21:38 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007d14a658a73b3fd997a3e0580dd03ceb2fa33a662ae0208a1a02b50a813fade498cda19b43e9061e2d53c12c2db772d2fc3646cefc272bf5aea4628d4e5d617cb70b35ad16454f9da8115042e04b7da6076aacfe9790920a8f66cde3a75bdb00"/110, @ANYRES16=r0, @ANYBLOB="08002bbd7000fcdbdf25820000000c0099002500000074000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0xd564e7fa884204f}, 0x20, 0x0, 0x0) [ 2074.363675] audit: type=1326 audit(1749460897.925:3028): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11370 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2074.390866] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2074.393207] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:21:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x15000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:21:38 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7, 0x7fff, 0x0, 0x84}, 0x7}, 0x20, 0x0, 0x0) 09:21:38 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:tape_device_t:s0\x00', 0x23, 0x1) r2 = dup2(r0, r1) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1004) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:21:38 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:21:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000d00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:21:38 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x14, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2074.542819] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2074.543988] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2074.550088] blktrace: Concurrent blktraces are not allowed on loop8 09:21:51 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:21:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:21:51 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) alarm(0x7ff80000) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f00000002c0)={&(0x7f0000000200), 0x3a11, &(0x7f0000000280)}, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) alarm(0x4) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:21:51 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000e00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:21:51 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:21:51 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x15, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:21:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xffffefff}) 09:21:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 2087.917065] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2087.918214] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2087.935361] blktrace: Concurrent blktraces are not allowed on loop8 [ 2087.944346] loop0: detected capacity change from 0 to 135266304 09:21:51 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000200bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2087.983721] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2087.986109] EXT4-fs (loop0): group descriptors corrupted! [ 2087.996214] kauditd_printk_skb: 36 callbacks suppressed [ 2087.996234] audit: type=1326 audit(1749460911.786:3065): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11448 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2088.004309] audit: type=1326 audit(1749460911.790:3066): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11448 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:21:51 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x16, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2088.024749] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2088.027277] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2088.033545] audit: type=1326 audit(1749460911.798:3067): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11448 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2088.040047] loop0: detected capacity change from 0 to 135266304 09:21:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xfffffdfd}) [ 2088.056789] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2088.058893] EXT4-fs (loop0): group descriptors corrupted! [ 2088.066010] audit: type=1326 audit(1749460911.799:3068): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11448 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:21:51 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000300bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:21:51 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 2088.113296] audit: type=1326 audit(1749460911.799:3069): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11448 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2088.126289] audit: type=1326 audit(1749460911.802:3070): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11448 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2088.138529] audit: type=1326 audit(1749460911.813:3071): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11448 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2088.158209] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2088.159970] audit: type=1326 audit(1749460911.813:3072): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11448 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2088.160168] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2088.169113] audit: type=1326 audit(1749460911.813:3073): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11448 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2088.185947] audit: type=1326 audit(1749460911.813:3074): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11448 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:22:05 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:22:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:22:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xfffffff5}) 09:22:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)={{r1}, {@val, @max}}) set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) fsetxattr$security_selinux(r3, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:apt_var_cache_t:s0\x00', 0x25, 0x1) 09:22:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:22:05 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x17, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:22:05 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000900bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:22:05 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x619, 0xda0, 0x7f}}, 0x20, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000180000000303b56231ebaa2cf13a552341d969c915019369ddf6efcc16adb3558035578fe70c7bae94d5e0532e86db6c4c0983c5746d1c8f55fe76cc491f287b09b2a9d16af8e993c716c6217f5c1c8953b5a680738be1adee20645bbc1512a585ec7d779fc5ebfa20df4443a4c689d4a88c25ce5de9f00c6ab63cd719342e791be50c120f7cfbdb2a6b98579428c327309860e66a4bd032c38ebb9faed4cc9b5a822672723a420ad53372e6942bbdbb19355560d5d24a83d80ca44edd78023968267000000000000000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000850) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000) [ 2102.200435] loop0: detected capacity change from 0 to 135266304 [ 2102.208692] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2102.210016] EXT4-fs (loop0): group descriptors corrupted! [ 2102.234264] loop0: detected capacity change from 0 to 135266304 [ 2102.245728] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2102.247331] EXT4-fs (loop0): group descriptors corrupted! [ 2102.269961] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2102.272492] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2102.287943] kauditd_printk_skb: 18 callbacks suppressed [ 2102.287963] audit: type=1400 audit(1749460926.078:3093): avc: denied { associate } for pid=11494 comm="syz-executor.5" name="vcsa3" dev="devtmpfs" ino=306 scontext=system_u:object_r:apt_var_cache_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 09:22:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2e000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 2102.301598] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2102.303969] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2102.308283] blktrace: Concurrent blktraces are not allowed on loop8 [ 2102.321291] audit: type=1326 audit(1749460926.107:3094): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11491 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2102.340066] audit: type=1326 audit(1749460926.108:3095): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11491 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2102.351193] audit: type=1326 audit(1749460926.108:3096): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11491 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2102.354504] audit: type=1326 audit(1749460926.117:3097): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11491 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2102.358143] audit: type=1326 audit(1749460926.117:3098): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11491 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2102.362118] audit: type=1326 audit(1749460926.118:3099): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11491 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2102.366981] audit: type=1326 audit(1749460926.126:3100): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11491 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2102.371284] audit: type=1326 audit(1749460926.126:3101): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11491 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2102.374620] audit: type=1326 audit(1749460926.127:3102): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11491 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:22:06 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000d00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:22:06 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:22:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x400000000000}) 09:22:06 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) 09:22:06 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x18, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:22:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:22:06 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x2, 0x7f, 0xd8, 0x3, 0x0, 0xa6, 0x68140, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8f37, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x4000, 0x7, 0x0, 0x6, 0x2, 0x58fd, 0x4, 0x0, 0x5, 0x0, 0xfffffffffffffeff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x6, 0x8c, 0x80, 0x7, 0x0, 0x6, 0x22, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000400), 0x3}, 0x100, 0x7, 0x7, 0x1, 0x1, 0x3, 0xfff8, 0x0, 0x3, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r2, 0x9) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:22:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:22:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 2102.513176] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2102.514331] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2102.568468] blktrace: Concurrent blktraces are not allowed on loop8 09:22:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x60000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:22:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:22:23 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x19, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:22:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x1000000000000}) 09:22:23 executing program 3: rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:22:23 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x221}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x20, 0x0, 0x800000, 0x1e108f4e5433a3e4, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x3) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:22:23 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000e00bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:22:23 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 2119.438539] loop0: detected capacity change from 0 to 135266304 [ 2119.475281] kauditd_printk_skb: 21 callbacks suppressed [ 2119.475300] audit: type=1326 audit(1749460943.266:3124): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11557 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2119.484169] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2119.486492] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2119.488181] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2119.490943] EXT4-fs (loop0): group descriptors corrupted! [ 2119.513187] audit: type=1326 audit(1749460943.285:3125): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11557 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2119.521129] loop0: detected capacity change from 0 to 135266304 [ 2119.553019] audit: type=1326 audit(1749460943.303:3126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11557 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2119.585972] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2119.588267] EXT4-fs (loop0): group descriptors corrupted! 09:22:23 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mknod$loop(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x19c, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x75}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7c0000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_DATA={0x6c, 0xc5, "845ecd4719753294e8686a61cd8bd85c528e434dfb3d20a80d48c0f7cdc6807727c6cd175acd4858a08481e3553be831bdda6a3c05be61b734556048b17929fe28703fd73999bf3aef3fab45c2fc7fd9bcd219c448da8210c57b2ab9f0a35d91b160e1d9ff707e47"}, @NL80211_ATTR_VENDOR_DATA={0xd8, 0xc5, "acf447b4ecbc8e6f2bc0df69ec86e5b4216c5c682c19de876b9791ce06849fe7d5fcaf403eaf4405c9078ffdbf31644aebaa48144bc8d236d0df6f3724f540d00bf9c6adf1beda26bb07f4af6975328fe256088a224eeb485ff8f8895144ff4f31064e52af73f6562d875274aadd740ac304756774faa84e31cd028cd84a06ce8b730b3145b2aac745c47812e47e2b26cce6ed841698cd56c115b7393a4eec666523902094619876c24ff59f40c320fdd39be366983eb995ab025764a6a060781b56ac7f026e111c2468479ccd8246b8090355b9"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffbff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6a4068d5}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4040884}, 0x10) 09:22:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xa000000000000}) 09:22:23 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x4, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:22:23 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2119.641656] audit: type=1326 audit(1749460943.304:3127): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11557 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:22:23 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:22:23 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000003bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2119.693647] audit: type=1326 audit(1749460943.305:3128): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11557 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2119.711822] audit: type=1326 audit(1749460943.311:3129): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11557 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:22:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 2119.727519] audit: type=1326 audit(1749460943.316:3130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11557 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2119.739241] audit: type=1326 audit(1749460943.317:3131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11557 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2119.748741] audit: type=1326 audit(1749460943.317:3132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11557 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2119.779513] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2119.781630] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2119.796743] blktrace: Concurrent blktraces are not allowed on loop8 09:22:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:22:23 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000400)) sendfile(r2, r1, &(0x7f0000000280)=0x401, 0x100) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCGETS(r4, 0x5401, &(0x7f00000002c0)) readv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:22:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000}) [ 2119.842707] audit: type=1326 audit(1749460943.317:3133): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11557 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:22:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x200000000000000}) 09:22:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0ed0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:22:38 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8, 0xffffffffffffffe4, 0x7f1, 0x7ff}, 0x1}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x7fff, 0x2e53, 0x16eb726c}}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:22:38 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0xfffffffe, 0x4, 0x7fff}) set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xe4, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xdf}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe6c}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9b}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4040800}, 0x4) 09:22:38 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x104, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:22:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000009bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:22:38 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:22:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 2134.884126] blktrace: Concurrent blktraces are not allowed on loop8 [ 2134.923253] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2134.924677] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2134.934457] loop0: detected capacity change from 0 to 135266304 [ 2134.939449] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2134.940748] EXT4-fs (loop0): group descriptors corrupted! [ 2134.953404] loop0: detected capacity change from 0 to 135266304 [ 2134.958114] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2134.959459] EXT4-fs (loop0): group descriptors corrupted! 09:22:38 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r2, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r2, 0x0, 0x0, 0x200}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x80464c453f) 09:22:38 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x40801, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x71c7, 0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2a4}, r2, 0x10, r1, 0x2) get_robust_list(r2, &(0x7f0000000480)=&(0x7f0000000440)={&(0x7f0000000280)={&(0x7f0000000200)}, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)}}, &(0x7f00000004c0)=0x18) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:22:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 2135.006150] kauditd_printk_skb: 22 callbacks suppressed [ 2135.006170] audit: type=1326 audit(1749460958.786:3156): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11619 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:22:38 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x109, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:22:38 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7d, 0x1, 0x5, 0xec, 0x3, 0x2, 0x6, 0x880, 0x134, 0x38, 0x386, 0x1, 0x435b, 0x20, 0x1, 0x6, 0x3, 0x4}, [{0x70000000, 0xffff, 0x1000, 0x5b, 0x5, 0x6, 0x7, 0x800}], "e021196e4935bef42dc31f21a3252805905a47e93515cdc28e048051cdedd050ba0293e578627726bd21c5e4a86e633ff4f4113b0ea06189a85cde823c495cb2e84063656b1743079a81a86d811fd9bafe571c61bd90eb974701042c3c36b6474542a3e98fda8ea7b499cf584b672fe9f663c6a87ac9c53cd2cb8806e61c6b9b0a3695945551122a10f1c011f17f0ae164e890c9f1cb9b596956ff2a2d95473985ca14b35315410a4ea45f8ea2f835742e61e17b00d35c2f13207a76403ff4701ed4b496ef69d202e64333a0cbdc3f260fbe84f0c24282934a821a232641b7412227b2cea2def5dd6489398dbddf9fd4e77e1766fb7b7e37d9a496253643c8f11c1e029a9f55e4005fc14eda35973be14e5df1a35ca189f9871c824ddb1c1f5808d3c5fd0d731dffbe62bf20b3c60a9071d4a6ee7588cbe4d402b4ed9872893bcb4f5e6fc40b2b9fd4c6fc71b8c2c8351add609bfcee052eee226492a74604ed3eeb0d5771ad052ad0be4ce03810c6feea865d73ae55b6d66d29c3f69642df20625dc573c34e85668de5dc11822f182519bc803f7bf4bf7af3f6074859dd77dd5eddcf240448d4ee1890c92e50771b5778256f43f8e67f1207701fe74e54caa4fa06d0b17b90b469def34a8fed2ce1b6d22347b0a18f5775d8afd4b9b223efe3b7887e4a3ec8fc659c1d822918eb1ca5e0cbb7c39a45b89f94a4fa64c0a535b6ae94f376b7fa49ec07889e12a1947d1e7a8c41857f1e259065a9ca1562226caa79d7ba1195cf57aa7b3481740f7cfe83eadaa30810833e687fb6749b692307e7475fb4cbc02e5f0169dd148f6eecc125f7ace5b1fe0ae4211925a3fdbc239ea957334caad1bae332f20e4407b7cf4b944786d5436c3f6f932f500f19ce086081017d6bd6d5257c73f8330e6b65f982d4157398d31425d82dc26b68185adfe100657d21eb56befc59fb9b648867329876347a3e8db5f0e01bf01cbd056507be619a1b0efe1e868e34abd7c86b4e7d3ec008c1ae4a7b40cd863467fa30ac58c7ebec67b79d01b4b9686699c0c638bd0553cb48516f16da2165bc9b47afbf5f25a270f57e0bd9dc500744f3329d5df6196317900ff449142a5d0c82fedf5296059bf32f2330ef51210cd3994995f1a2487b68fec87c531862a12d9658a8b6c7be20ab9ca945e70560a3f2b843327b08f7ef655ec6b0463f6638a500024ad236dddd44f9478507e30b43e26700d895f705ec0648d6a94b5ab46b4f745b1f24d72854680c83e2b6893e2ef6ee71c3dfd899d255a76be15ea00a5176ac20a6deef354d2374e35ddf40c4acf4bedd21db2314fcdec6181eda5bedeb7c5f2e0bce6c20d66242d1b03aba1bb0da3cfdf5162b05a8e7f78ebd54d55dfc5d6ece5fae2e9ea01dcd34729900a75a6c11787d5fc47de1a76ca73292c12ead5f6de119a3b09a63309b6d56b7eac83af585c99826dbb79dc7df3877f259ee577864db80f2279a1369e7418a84fd7d08515712ec0b334cd7bf3adfc4c047c6f9bba852fcb9e0850004e74906444f7dffbeafc07093d36c9fec6260448ba0a5f447ed1d04d7b0bea68359d47daa902c6dc04412a4df4f555869857fc6a42d7471edad7c62fb02a27fc4c0596c79a205309fd1e96b9c225b122e0b159465f5f2bde46a8adae6e7bfe03109732c10bea2732e8a3b8f92a0152dfa0925e267c361ddd298bc994479cc6c2f2a70e9d9bd8edff9c067e6db1a00675d37863eefaa4e4a01e956cbfd76ac072553cd64e3d149552f6bda34593002b314b6a14997712e69c6d529d35c41c4e35ec957fdf18f1b2949c3f5494c3b26cfde6f2822479806b857b28a2e9fe53c51b8d6dd57fe808d9a2f40d02afe30e8a2d41831bccb5184b26f4b87bf44d31f383f76d8e1797aaf2c937c6f8bb9be34514856565fe166b53a9a065f7fd0b976dc946b6e3a20dba7e9e87a8b7bfaf113d536934d1d92d4ee39f0bf24653ae4ea48878db66e17c539470a36436e05437d0b7e8d3dad84dc4332c7f879a0325a4306aed851fd9ac699e576289d05e2ddd6243ef7bab96b76f6487431d40dc6707d5927418e2dc673074444d27151904a66d3b406d3bb448d28de5455df8bbd036f6974e1193dc72dd9443972ac35a3974901ae90352c05ed22bf025012b9238f7e2527f71381895b1e2328a3f604f6713da2a977e73159de7a978978cfc4b56c128912b01f63dd6248e1f554a8a15aa58d24494793322c5b7dea08fda07f589cd00570098acbbd72abf1c3e8c8e783c2b4c6a5e6a96ba3a7270e9a7495123c542265ecb6ad0e4aa9a0abbf639f865b87563dbbcde260930f32204ec3fb7da295057dbd771dd11b0fdc3f9002ac2f9986bbaa83675276b6ddbff5f05c32fc4f8a4482f2c79481fd02db02e287680d739ffa30690e1cdc9d3fbae0d2942c74b5a1835a7d1275644a98e4b78c87d5b35d1bc8e7dfa608325a3ae4f4f1c1356c5332c92a940e734d5e49bdc8af3ec07bae18159e748a757f32baebbeafc34c931d63777a0b22bd46eaa76151493edfa55939bc792f4dda7b44eb38f0bbe43c3b7ec3dd6dcd1961c0efe8be7457f05eabdeb6d46fc098ee0f0e2cac4aca4b20a61806acb37817ab770375b1ac56e332f9b05a50e4bc1253213cecdc72c7edbb252948a51390fce49afabed171d28fbee24e622400d414d9f4a65162f85e4a923f6b98d80f139924e1e120a962601eedf9ad8b38da95ef34e922a0c24c8a18c1f002b8bffb205c49cbf0650a52715fe8ecbb83db8dd9482775e8b23c7508410738c6e97b8e9bd7483cb74529a35b5d0f2766c977baedcb30073938d1d477b0ec109748644f7495151ff89482ee2b342f3ab0d13d47b7d1bcf729a17b84c029def3d6f11fc476c6870f45cb9f62e74cc92f70f388b572c5dc28bce1efd5821d4ba615d792e3bbbd7ba0ee4c2f7dc32c36cd85e4969274a1d5a64e17c612c9367c1bae4e1f4951d9d5b63de770e5bc7781c43d61085b44ad43b0652634b3fd699c56882e8078dccf93dc7c5a0f0415bdf2b19666eb4f8b782e3d7975555ae9a253744f61ec36b0f478b756ef32584d06ebece4f9bc2256a7cc513c5e0bb260009d46967d90a8e420baf25cce91853453ff45b3b77f64e2cac7ec731874a4c707722440dde8c8438657721e885efcd8a8c862bf1d27375b7e38dc4cea65776756dab2bc6b4634310b9c4b17167862d723e0859653f2e7b7c70bcbfdb789734b5e307ec5f4542f0f4b52b9fa04a35e0c28365192d02189d392a3244fffac72f613c17fd0f44d06c7e72a26c1a0997c5c58d1a9c2ddbe718ac3f0d6dbd241203ef8998aff4f0f2aa0e7ee33ef0cdf76508ab22a34c4ec94d3c658087028a51fa9090a9e27b4db147d01f32e57c6777ef1dc0ef68f45a8afc5b64bd8c7b54bcbe952f9707473d4b969ed391d2537e9ac4a484d322a23d1acce9f0386e30239fda36dac03f291ad3439011fcfc6ee0b629592fa4da0e6624dbb3741f6de38415872ef78288e59cb0f61c665c1ab448a473485e9c18764debddd1d7afdc38180bc476be733fa982c3bd0805f19fcf54dc696554f883df445dc2366f4bfebd962027a9814e33e564f12430192fc310809fad2334aec02a0812d7837c03a6c3679aca01361fc3b0e5fbd611cce5b6978a307d0063b274948ae3bd1f8ef645f9374112d496869f1262d3307a0e3e96a5dc16d546e32495b3d97c7fb5cdf17d56b91a09f2e7d881c5489625b5ad59dd3108a8c6c72397b92af694eda5a2ab010479cfa9c3d8323cd2229636d41573925f6320ef8201f7e550b05485a3f938735ec4ab2e3c764fc804a6c2286a456416d54e8f5752531e965fbedf1e27db184f6fba208cb32e8837c215e3e1d4e13be51ee3d561665a10e8f79a856889004de36009e73e988fa3822739a8fb155d4d1ecf6d9cdc23357cc2db7ba82e29cd19c7807a7adc7349be505ce9d29fdde58508e7d5f97567adec89abdbb31dd0bed0514a5add10145588acaea69c4b3cfa9dfc3ca3352556876211a6345ba3b99f81a45cef00a5dabb8f793907ce0466d43077ad7f54c340dcfffbde30ee4fa126be1a0f4d00ccb85edf73db06da6124e16d91b79c99dc9d68010593edd5cf4fe7f259d808281a02df20a6fe0b531360480eb50aac3f9536de745008c94b3275e17320c6617710691aa1fce6435a6304972829315639b3c95f198c16cde40e8dfacc669137491ff80c3599d400f6bf3d5ab094b6d7994e5d92977c825d124f56826db749cb927a80fd5168264321144c1ae2a1620ade9bb37bb245cf420692fb5dbb7d426f37d3b6e374a5ddaebf484026c988a83693d3fc1823ccc681b58613fd43789cfd6d287cea36c2166cd1cf842cd99499eece157eb06e0efa9a746e12ecd6c6144877abd3c9c71ba469e163b9bb3f4109394865fac33f6ecd96ca0463a2d2fe1ddda70e449f00d550cf652e58d0e9ce9aaeea33f1572ef98bedde5ddd389830f94266ab12ad3bc1eb8fb3e79c359e99d41875287dc553b521e1b86292569e07fc5bbf142bbd7d86b2ec09b540b478190cdd36ce039da065d652c31030f6048ee24b502caba1e0eed4bcf3a9bbe7c80d7f4a0e00438fb5608078fe9c51d85bc51e86815d268fdf79af2883e654ca24bd2a6aab147c88e2b2188ac8d50d749e31661d291b01f343c6fc816a60d85f6490cbc1c69a26d589c464bcbcd71368662932c8b34702744fe5d2aa639a775fd2525c626ed3728dd32e6c9bd55adfc21039ae812d66a512429538a38599cb600ba633a1249ad1508c92875c981b30c372bfcb8405bbbfa9239c48a036a7e9f8bbbad407430eac3118bca103dd35dd3922342977bf0e998a03cda028391b586b34d4e42e77bd2284ced1f637337d871de9fb78e4be5fd40d4e8cccffe61f46c2ce3b87411f0fe11bb94bc7912bbaebfece87561d99ef1cd3117b6ca0c3f7f19e87cc1b7c27ed94aca784ccba8c3381ae31a005976410df6436b36be38c5ee4609d66615e1bb83b9adfe842ea6b09c7c7fafb2e918b143f1e85d8f572eddd6c35adcf87afc0f27a2b8f5a94e09fe85ba4c605d804d1be966c6f6dd55b6bfa31d40d1d00cc1700e999f0d242f4f9ca1ce5072c1dfedcffd0d3f609618db01175b27372447d1ce0d2576801d73f3680e786ed4e057b84db8e55f66a314694d8320a4c2ae66f5801d3d375ea1e0e364a953d7158b8413fcff8e2f33f1982d36162a6cdcc22f79d2dcf0788fe5814864bf82f31491d5bda4b86e990633bd7aaed28b66ee324c15ab923136c1c1396f459c219c0dc192e5f639ef1f10a0b2ccf848bd5cd692640519b463bdcad693b0ea12089df811e72273a9ac07e830480a21869103815c88acfd1d62329589514461ea5726889c210624775a91192c44c9fabbe4fe107c8655f8ea1df745c2bc8832ec370c4801ae7cc6c945b0a6407888a4bd023a2355fd605154e4bdcffd6c3f7bdc29d991b9392293d90b9039ffad6db4e9441a23186c9034978b3861e843a62cd8603f3e99f6d882ee4161e549341a01ed05c17a91fcc05abb1181a5b16fe2da83098338ef3a9b66a7613c948947198bd9a678fcdcb1714b24dcc015fcaeeedb32372e07c5d506e324001acb191edbe41abf3c564fa31f6bb9c037c27bfc3f2eba09b662a772a8d0a6256afb4bc4a3ede428dd4a4e36c3d0b94b7aea21de8629ccdbe09f6d0e55eeb255a097cc59246571c656eb3bf863f49bf599274ca47fe2926430bb0fa76eaa3ef14bfe6487b239", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1a58) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) [ 2135.022549] audit: type=1326 audit(1749460958.808:3157): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11619 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:22:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x300000000000000}) [ 2135.053558] audit: type=1326 audit(1749460958.809:3158): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11619 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2135.057439] audit: type=1326 audit(1749460958.836:3159): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11619 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2135.061081] audit: type=1326 audit(1749460958.836:3160): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11619 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2135.065627] audit: type=1326 audit(1749460958.836:3161): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11619 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2135.069710] audit: type=1326 audit(1749460958.844:3162): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11619 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2135.073189] audit: type=1326 audit(1749460958.844:3163): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11619 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2135.076963] audit: type=1326 audit(1749460958.844:3164): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11619 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2135.080456] audit: type=1326 audit(1749460958.844:3165): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11619 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2135.094372] blktrace: Concurrent blktraces are not allowed on loop8 09:22:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000dbbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:22:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x400000000000000}) [ 2135.158436] loop0: detected capacity change from 0 to 135266304 [ 2135.169229] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2135.171597] EXT4-fs (loop0): group descriptors corrupted! 09:22:38 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) fcntl$getown(r2, 0x9) [ 2135.197353] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2135.199775] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2135.217463] loop0: detected capacity change from 0 to 135266304 [ 2135.273964] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2135.276258] EXT4-fs (loop0): group descriptors corrupted! 09:22:51 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) r0 = perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x6, 0x1, 0x20, 0x2, 0x0, 0x9, 0x20000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x3, @perf_config_ext={0x7, 0x4}, 0x10900, 0x8, 0x0, 0x9, 0xadd7, 0xffffffff, 0x6, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9800c4dabff48c0a) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x4, 0x0, 0x5, 0x4, 0x0, 0x80000000, 0x8400, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000200)}, 0x40000, 0x0, 0x6, 0x2, 0x2, 0x7, 0xff, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xc, r0, 0xf) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:22:51 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:22:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf9fdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:22:51 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r2, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r2, 0x0, 0x0, 0x200}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x80464c453f) 09:22:51 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x10a, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:22:51 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x1, 0x0) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7, 0x3, 0x800, 0x2001}, 0x3}, 0x20, 0x1, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000080)) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x18, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x800) 09:22:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x800000000000000}) 09:22:51 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000ebbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2148.040397] loop0: detected capacity change from 0 to 135266304 [ 2148.065318] blktrace: Concurrent blktraces are not allowed on loop8 [ 2148.085096] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2148.087350] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2148.097201] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2148.099374] EXT4-fs (loop0): group descriptors corrupted! 09:22:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x900000000000000}) [ 2148.124830] kauditd_printk_skb: 4 callbacks suppressed [ 2148.124857] audit: type=1326 audit(1749460971.915:3170): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11674 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2148.140500] audit: type=1326 audit(1749460971.926:3171): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11674 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2148.165229] audit: type=1326 audit(1749460971.927:3172): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11674 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2148.192228] audit: type=1326 audit(1749460971.927:3173): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11674 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2148.220790] audit: type=1326 audit(1749460971.941:3174): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11674 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2148.234955] audit: type=1326 audit(1749460971.941:3175): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11674 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2148.248807] audit: type=1326 audit(1749460971.941:3176): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11674 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2148.265006] audit: type=1326 audit(1749460971.942:3177): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11674 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2148.270007] audit: type=1326 audit(1749460971.942:3178): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11674 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2148.277989] audit: type=1326 audit(1749460971.943:3179): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11674 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:23:06 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r2, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r2, 0x0, 0x0, 0x200}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x80464c453f) 09:23:06 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x70c, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat(r0, &(0x7f0000000340)='./file1\x00', 0x2, 0x0) 09:23:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xd00000000000000}) 09:23:06 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:23:06 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x138, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:23:06 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:23:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfbffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:23:06 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000002bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2162.707126] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2162.708525] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.721354] loop0: detected capacity change from 0 to 135266304 [ 2162.730423] blktrace: Concurrent blktraces are not allowed on loop8 [ 2162.746478] kauditd_printk_skb: 5 callbacks suppressed [ 2162.746489] audit: type=1326 audit(1749460986.537:3185): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2162.750427] audit: type=1326 audit(1749460986.537:3186): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2162.774086] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2162.776372] EXT4-fs (loop0): group descriptors corrupted! [ 2162.801187] audit: type=1326 audit(1749460986.590:3187): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2162.807380] audit: type=1326 audit(1749460986.590:3188): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2162.814785] audit: type=1326 audit(1749460986.590:3189): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:23:06 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:23:06 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000003bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:23:06 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x148, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:23:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xe00000000000000}) [ 2162.848784] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2162.851012] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.858105] audit: type=1326 audit(1749460986.591:3190): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2162.878096] audit: type=1326 audit(1749460986.591:3191): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2162.893204] loop0: detected capacity change from 0 to 135266304 [ 2162.906437] audit: type=1326 audit(1749460986.591:3192): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2162.923300] blktrace: Concurrent blktraces are not allowed on loop8 09:23:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r2, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r2, 0x0, 0x0, 0x200}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, 0x0, 0x14) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x80464c453f) [ 2162.929687] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2162.931804] EXT4-fs (loop0): group descriptors corrupted! 09:23:06 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4000010, r1, 0xe8) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:23:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xf00000000000000}) [ 2162.957157] audit: type=1326 audit(1749460986.597:3193): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2162.984994] audit: type=1326 audit(1749460986.597:3194): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:23:06 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000009bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:23:06 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x10, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3471, 0x4c882) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 2163.081495] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2163.082722] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:23:06 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:23:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfcfdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:23:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x1000000000000000}) 09:23:06 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x14c, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:23:06 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000dbbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2163.132368] loop0: detected capacity change from 0 to 135266304 [ 2163.143917] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2163.145082] EXT4-fs (loop0): group descriptors corrupted! [ 2163.171065] loop0: detected capacity change from 0 to 135266304 [ 2163.177026] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2163.178172] EXT4-fs (loop0): group descriptors corrupted! [ 2163.183414] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2163.184589] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2163.202190] blktrace: Concurrent blktraces are not allowed on loop8 09:23:19 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) syz_open_dev$vcsa(&(0x7f0000000200), 0xfff, 0x404280) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:23:19 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:23:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x2000000000000000}) 09:23:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:23:19 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000ebbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:23:19 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x168, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:23:19 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') syz_usb_disconnect(r0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:23:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r2, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r2, 0x0, 0x0, 0x200}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, 0x0, 0x14) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x80464c453f) [ 2176.016059] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2176.018318] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.032004] kauditd_printk_skb: 35 callbacks suppressed [ 2176.032024] audit: type=1326 audit(1749460999.822:3230): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11770 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2176.044776] audit: type=1326 audit(1749460999.823:3231): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11770 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2176.048342] loop0: detected capacity change from 0 to 135266304 [ 2176.061898] audit: type=1326 audit(1749460999.823:3232): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11770 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2176.063333] udc-core: couldn't find an available UDC or it's busy [ 2176.065321] audit: type=1326 audit(1749460999.823:3233): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11770 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2176.066206] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2176.069177] audit: type=1326 audit(1749460999.823:3234): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11770 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2176.073526] audit: type=1326 audit(1749460999.825:3235): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11770 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2176.077364] audit: type=1326 audit(1749460999.825:3236): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11770 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:23:19 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691021e97a8aa8c"], 0x34) [ 2176.081192] audit: type=1326 audit(1749460999.825:3237): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11770 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2176.084307] audit: type=1326 audit(1749460999.825:3238): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11770 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2176.087405] audit: type=1326 audit(1749460999.825:3239): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11770 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2176.109418] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2176.110630] EXT4-fs (loop0): group descriptors corrupted! [ 2176.159415] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2176.160646] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.188613] loop0: detected capacity change from 0 to 135266304 [ 2176.198209] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2176.199409] EXT4-fs (loop0): group descriptors corrupted! [ 2176.816446] udc-core: couldn't find an available UDC or it's busy [ 2176.818133] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 09:23:35 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x16c, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:23:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:23:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x3028000000000000}) 09:23:35 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x80000001, 0x8001, 0x400}, 0x2}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:23:35 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:23:35 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r1, &(0x7f0000000340), 0x0) 09:23:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691031e97a8aa8c"], 0x34) 09:23:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r2, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r2, 0x0, 0x0, 0x200}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, 0x0, 0x14) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x80464c453f) [ 2191.320686] loop0: detected capacity change from 0 to 135266304 [ 2191.384004] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2191.386160] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.386281] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2191.390684] EXT4-fs (loop0): group descriptors corrupted! 09:23:35 executing program 3: keyctl$session_to_parent(0x12) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) [ 2191.432414] blktrace: Concurrent blktraces are not allowed on loop8 [ 2191.457280] kauditd_printk_skb: 3 callbacks suppressed [ 2191.457306] audit: type=1326 audit(1749461015.247:3243): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2191.468414] audit: type=1326 audit(1749461015.258:3244): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2191.522639] audit: type=1326 audit(1749461015.258:3245): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:23:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x3828000000000000}) 09:23:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xff0f0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:23:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691091e97a8aa8c"], 0x34) [ 2191.549776] audit: type=1326 audit(1749461015.264:3246): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:23:35 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x174, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2191.572632] audit: type=1326 audit(1749461015.265:3247): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:23:35 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0xcde}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0x9, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:23:35 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008845}, 0x48000) [ 2191.596620] audit: type=1326 audit(1749461015.292:3248): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2191.612577] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2191.614659] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:23:35 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 2191.628763] audit: type=1326 audit(1749461015.292:3249): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2191.657451] audit: type=1326 audit(1749461015.292:3250): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2191.681778] audit: type=1326 audit(1749461015.293:3251): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2191.687431] loop0: detected capacity change from 0 to 135266304 09:23:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff36071586910d1e97a8aa8c"], 0x34) [ 2191.694675] blktrace: Concurrent blktraces are not allowed on loop8 [ 2191.698355] audit: type=1326 audit(1749461015.293:3252): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2191.707856] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2191.709769] EXT4-fs (loop0): group descriptors corrupted! [ 2191.737798] loop0: detected capacity change from 0 to 135266304 [ 2191.743220] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2191.745087] EXT4-fs (loop0): group descriptors corrupted! 09:23:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x4000000000000000}) 09:23:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:23:35 executing program 3: r0 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 09:23:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffbffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 2191.824316] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2191.826186] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.852429] loop0: detected capacity change from 0 to 135266304 [ 2191.891826] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2191.893528] EXT4-fs (loop0): group descriptors corrupted! 09:23:52 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x8, 0xb, 0x1cd}, 0x1}, 0x20, 0x1, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x4032, 0xa0}, 0x4}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 09:23:52 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="01e861dc94796fe5713b0018", @ANYRES32=r0, @ANYBLOB="c40c000080f9ff002e2f66696c653000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) socket$netlink(0x10, 0x3, 0x5) readv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:23:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x4028000000000000}) 09:23:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:23:52 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:23:52 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x17a, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:23:52 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff36071586910e1e97a8aa8c"], 0x34) 09:23:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffbff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 2208.357078] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2208.359122] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.376188] kauditd_printk_skb: 18 callbacks suppressed [ 2208.376202] audit: type=1326 audit(1749461032.167:3271): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11877 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2208.379444] blktrace: Concurrent blktraces are not allowed on loop8 [ 2208.382249] audit: type=1326 audit(1749461032.171:3272): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11877 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2208.400277] audit: type=1326 audit(1749461032.171:3273): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11877 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2208.404203] loop0: detected capacity change from 0 to 135266304 09:23:52 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x23) [ 2208.417955] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2208.419921] EXT4-fs (loop0): group descriptors corrupted! [ 2208.447641] audit: type=1326 audit(1749461032.178:3274): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11877 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2208.463945] loop0: detected capacity change from 0 to 135266304 [ 2208.465182] audit: type=1326 audit(1749461032.178:3275): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11877 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2208.469397] audit: type=1326 audit(1749461032.179:3276): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11877 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2208.473497] audit: type=1326 audit(1749461032.179:3277): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11877 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2208.523389] audit: type=1326 audit(1749461032.179:3278): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11877 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:23:52 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x300, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:23:52 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) 09:23:52 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xffff, 0x4}, 0x0, 0x0, r0, 0x1) r2 = dup3(r1, r0, 0x80000) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x32, 0x2, 0x3, 0x0, 0xd48, 0x40000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x19400, 0x5, 0x9, 0x3, 0x29f1, 0x0, 0x9f07, 0x0, 0x15, 0x0, 0x4}, 0xffffffffffffffff, 0xd, r2, 0xb) alarm(0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 2208.530081] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2208.532113] EXT4-fs (loop0): group descriptors corrupted! [ 2208.568028] audit: type=1326 audit(1749461032.180:3279): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11877 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:23:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x4828000000000000}) 09:23:52 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 2208.601185] audit: type=1326 audit(1749461032.181:3280): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11877 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:23:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:23:52 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x500, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2208.725833] blktrace: Concurrent blktraces are not allowed on loop8 09:24:08 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x29) 09:24:08 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x900, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:24:08 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006480)=[{{&(0x7f0000001480)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/183, 0xb7}], 0x1, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000001680)=""/154, 0x9a}, {&(0x7f0000001740)=""/222, 0xde}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/194, 0xc2}], 0x7, &(0x7f0000001ac0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000001b00)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001b80)=""/9, 0x9}, {&(0x7f0000001bc0)=""/202, 0xca}, {&(0x7f0000001cc0)}, {&(0x7f0000001e00)=""/221, 0xdd}, {&(0x7f0000001d00)=""/23, 0x17}], 0x5, &(0x7f0000001f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000002080)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000005180)=""/187, 0xbb}, {&(0x7f0000005240)=""/253, 0xfd}], 0x2, &(0x7f0000002100)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x60}}, {{&(0x7f0000005340)=@abs, 0x6e, &(0x7f0000006440)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/111, 0x6f}], 0x2}}], 0x5, 0x10000, &(0x7f00000065c0)={0x0, 0x989680}) perf_event_open(&(0x7f0000001400)={0x0, 0x80, 0x1, 0x8, 0x2, 0x7f, 0x0, 0x8, 0x2000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x700000000000, 0xffffffff}, 0x6000, 0x3, 0x10001, 0x4, 0xffffffff, 0xfffffffd, 0x2, 0x0, 0x1, 0x0, 0x1}, r2, 0x7, r0, 0xf) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000001840)={@dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010100}, 0xc) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000400)={{r0}, "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"}) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1514c2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000280)={0x1, 0x3800000, 0xff}) readv(r4, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:24:08 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000001100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}, 0x3) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) writev(r8, &(0x7f0000001140), 0x0) 09:24:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdf9, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:24:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:24:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xf5ffffff00000000}) 09:24:08 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 2224.718681] blktrace: Concurrent blktraces are not allowed on loop8 09:24:08 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x20000074) 09:24:08 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xa00, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2224.811700] kauditd_printk_skb: 20 callbacks suppressed [ 2224.811720] audit: type=1326 audit(1749461048.602:3301): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2224.821285] audit: type=1326 audit(1749461048.610:3302): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2224.829303] audit: type=1326 audit(1749461048.610:3303): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2224.840304] loop0: detected capacity change from 0 to 135266304 [ 2224.841002] audit: type=1326 audit(1749461048.611:3304): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2224.868438] audit: type=1326 audit(1749461048.611:3305): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2224.872218] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2224.875666] EXT4-fs (loop0): group descriptors corrupted! [ 2224.910357] blktrace: Concurrent blktraces are not allowed on loop8 [ 2224.928684] audit: type=1326 audit(1749461048.618:3306): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2224.934695] loop0: detected capacity change from 0 to 135266304 09:24:08 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f0000000500)={0x0, 0xed, &(0x7f00000002c0)={&(0x7f0000000280)}}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xffffffffffffff75, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x100000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x4, 0x0, 0x800000, 0x0, 0xffffffffffffff80, 0xd0a8, 0x4}, 0x0, 0x3, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000400)=""/252, 0xfc}], 0x1) 09:24:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xf8ff3f0000000000}) [ 2224.988020] audit: type=1326 audit(1749461048.618:3307): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2225.002078] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2225.004113] EXT4-fs (loop0): group descriptors corrupted! [ 2225.016663] audit: type=1326 audit(1749461048.618:3308): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2225.048040] audit: type=1326 audit(1749461048.619:3309): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2225.053152] audit: type=1326 audit(1749461048.619:3310): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11938 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:24:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xfdfdffff00000000}) 09:24:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdfc, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:24:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) 09:24:25 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:24:25 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{0x45}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x148, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "021811f9dd3e57d86ba0f72f3295f8349abd07f7c71aef1d"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33ed093909380eb9d2f4abd0a1466be7af2881739d188f12"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1133ab5d30eab0a40be2c34d6e25118c53af2932c440200f"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x148}}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, 0x1f, 0x300, 0x70bd2c, 0x25dfdbfc, {0x8}, [@generic="4fbf33b543b4b4de43060fa08256fb656c624e879f9e0e0fdfc4c93c5c798973aed3e0f272c900554d3bf969f411a3288041f9f5a70820296f15d23bfbf3709d48759ef0d100bc10f207aec8a385262a81a0c6ba2b895dc2716105ed361829bdb1c5c85b19d7"]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4008004) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x0, 0x101}, 0x4}, 0x20, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {{0x45}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x894) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0x2}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_MODES_OURS={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x556799e7}, @ETHTOOL_A_BITSET_VALUE={0x17, 0x4, "05447a9276222c846a9c4887a3abce0f48a6af"}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x2400c804}, 0x4005) 09:24:25 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1400, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:24:25 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) set_robust_list(&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x9, &(0x7f00000004c0)={&(0x7f0000000480)}}, 0x18) r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xc}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x9, 0x5, 0x25, 0x5, 0x0, 0x4, 0x222, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000580), 0xa}, 0x4000, 0x7, 0x7, 0x1, 0x3, 0x1, 0x1, 0x0, 0x9, 0x0, 0x8000}, 0xffffffffffffffff, 0xf, r0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x9c) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:24:25 executing program 6: openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x20080, 0x50, 0x1b}, 0x18) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@generic, &(0x7f0000000000)=0x80, 0x800) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = accept4$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f00000002c0)={'ipvlan1\x00'}) sendmmsg$inet6(r3, &(0x7f0000004600)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r5}}}], 0x28}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r5, 0x29, 0x80, 0x7f, 0x9, 0x22, @dev={0xfe, 0x80, '\x00', 0x24}, @remote, 0x5dda3de01c4e5ef9, 0x7800, 0x3, 0x24e}}) r7 = fcntl$dupfd(r0, 0x0, r1) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2241.775783] loop0: detected capacity change from 0 to 135266304 [ 2241.783577] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2241.785230] EXT4-fs (loop0): group descriptors corrupted! [ 2241.787557] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2241.787598] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.794588] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s 09:24:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r3, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, 0x0, 0x0, 0x200}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x14) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) [ 2241.794638] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.842669] blktrace: Concurrent blktraces are not allowed on loop8 [ 2241.845076] loop0: detected capacity change from 0 to 135266304 [ 2241.848705] kauditd_printk_skb: 3 callbacks suppressed [ 2241.848723] audit: type=1326 audit(1749461065.639:3314): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11978 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2241.853250] audit: type=1326 audit(1749461065.644:3315): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11978 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:24:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdfd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 2241.855376] audit: type=1326 audit(1749461065.646:3316): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11978 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:24:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xa5, 0x4, 0x7, 0x6}, {0x7f, 0x20, 0x7, 0x1000}, {0x0, 0x9, 0x8b, 0x5}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5bf8fdc510a177e2) r6 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x40801, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x71c7, 0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2a4}, r6, 0x10, r5, 0x2) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={r6, 0xee00, 0xee01}, 0xc) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES64=r3, @ANYRES32=r1], 0x34) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40086607, &(0x7f0000000080)) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000100)={0xe5, 0x200, 0x9, "eaf26d52be757d6a3ba777d63904decf79f6d93d4882aaca74813c4ce36ad3b0f896d8f7012e1382c14b7cd6f4d3f295d676f6b6c8283a57cc4a0a1b24ba63b0aff0679ebaa76a30c16d72522d363d1759b4d4abdd2158b11c1138803d59a9b69d3e57569dce6bd393b5a0b9db90d0c14bffb60590425df1cae15e23207b400b7954890b82c2293d6431fcc9f7fc9bf9ca88b5e91aeb05eba08ea0967438a745e0e4b3a62aa1276aca5d791fa1a687a7a83cce3da97fc4f596f3d37490311dc4b9029a8f81fe2871616393dd828793905b961658a5d781884b7c201c1bf9a0747f12685165"}) 09:24:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xffefffff00000000}) [ 2241.855427] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2241.855438] EXT4-fs (loop0): group descriptors corrupted! 09:24:25 executing program 3: rseq(&(0x7f0000000180), 0x20, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x7ff, 0xd05}, 0x3}, 0x20, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x110, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x4010, 0xffffffffffffffff, 0x10000000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_io_uring_submit(r0, r1, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, &(0x7f0000000300)="8b6b14b34feac2529a2ac7d992ea045d6686e23114b0c8f2704a92d7d1db4ff4efad3cc9a2fb5e6e9e2ad0b007209c585e84e45cadd83ecc1a9949394234d9d2dd4e94952670406b26c6c27e8671cb95b7885d38f62781e88643f784471b27aa0044f645a63c391fc5ab065728ed59f8ba210f1a4967", 0x76, 0x4}, 0x9) socket$inet6_udplite(0xa, 0x2, 0x88) rseq(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x6, 0x3, 0x7, 0x8}, 0x2}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x8, 0xffffffffffffff59, 0x9}}, 0x20, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20064000}, 0x40) [ 2241.863315] audit: type=1326 audit(1749461065.653:3317): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11978 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2241.878403] audit: type=1326 audit(1749461065.668:3318): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11978 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 [ 2241.881586] audit: type=1326 audit(1749461065.672:3319): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11978 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2241.900228] audit: type=1326 audit(1749461065.690:3320): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11978 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:24:25 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 2241.903653] audit: type=1326 audit(1749461065.694:3321): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11978 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:24:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r2, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r2, 0x0, 0x0, 0x200}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x14) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x80464c453f) [ 2241.907741] audit: type=1326 audit(1749461065.698:3322): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11978 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2241.911367] audit: type=1326 audit(1749461065.699:3323): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11978 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:24:25 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) 09:24:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff7f, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) [ 2241.975764] loop0: detected capacity change from 0 to 135266304 [ 2241.985393] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2241.985405] EXT4-fs (loop0): group descriptors corrupted! [ 2242.066381] loop0: detected capacity change from 0 to 135266304 [ 2242.075529] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2242.075541] EXT4-fs (loop0): group descriptors corrupted! [ 2242.157852] loop0: detected capacity change from 0 to 135266304 [ 2242.162154] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2242.162165] EXT4-fs (loop0): group descriptors corrupted! [ 2242.237151] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2242.239266] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.255403] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2242.257557] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:24:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r2, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r2, 0x0, 0x0, 0x200}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x14) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x80464c453f) 09:24:41 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:24:41 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x4000, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:24:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0xffffffff00000000}) 09:24:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40086607, &(0x7f0000000080)) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffd, 0x15, 0x6, @buffer={0x0, 0x79, &(0x7f0000000000)=""/121}, &(0x7f0000000080)="4de09b1fa34271005bc51e544d20fee44c01746411", &(0x7f00000000c0)=""/110, 0x2, 0x4, 0x1, &(0x7f0000000280)}) r3 = fcntl$dupfd(r0, 0x0, r1) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x34) 09:24:41 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) 09:24:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:24:41 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close(r2) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000002640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002600)={&(0x7f0000000100)={0x24cc, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x73}}}}, [@NL80211_ATTR_IE={0x4d, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7b}, 0x0, 0x5, @device_b, 0x9, 0xfff, 0x100}}, @tim={0x5, 0x19, {0xd8, 0x9d, 0x0, "60759df79837480ee460c5fdb3bf78a953cea997cfa4"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xdf, 0xd4, 0x80}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x70, 0xdb}}, @mesh_chsw={0x76, 0x6, {0x81, 0x20, 0x3a, 0xe81d}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe2, 0x7f, [@random_vendor={0xdd, 0xdc, "909ec4d922d77c5f7e2e35341a934872a5da0218a9a6c7b4c3eb4370124300b332bb165455c99b852f0f6fb05ce2d4b8b3728996cf459f7aed987a6d6f654427800757f615dd773492fc6c1b982ef98cb2ba8b92b24b4cca64879dee1d75ea66c72e10b429ed25a025378ccd560d040b68c914dfb778f934bb85cc3a1494958a324b0263c5b1bbdf2d0f059118e9a4f5d38df0b33f62b37fd50608a453983755ca2dd84d8931e6780f1cac05e509d44a721040321e7d93f9dfa140548bfb47c6a831beb10f100a18e9481679f5841b4666f1d2bb3cdda8666b86133d"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x100, 0x2, "1b8e962d183d2ceec03d6a6b0aab37c1bb01ce070fe688c9863b3ca539d8cdc8f0efb1167fa46a4bd2a114be8adcc20dc3db910e603f68c3e16675b172dc0ba2c68effd7071f9112d5d7b45bf6c855aa7f02679b67360cb82006f001cbdb2658f64640946e320c319a2dade535b788cc6e961814d08777f372a3f458d44331bb29c69e95c7e72b6226d9e0bd79e99b7f5d1d12c0ce1af24cb1be4f58f865552c2dba9ba4ab55db00cad44957052912d6c53a37ca4438eacf68ed45b1992dd28e8475d180c812796aef7b4d4a1e3794bb6e2860e5c024b67043641afcfaff3cb409594c566660471fc02675585082304f2e6b25c65812418af4d09dad"}]}, @NL80211_ATTR_FTM_RESPONDER={0x10a8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x96, 0x2, "baae377f05c213c076b59d13c4a50ea23c576bef17a76f9eff2f8f64409b39f96c7b3c9d49db295f243eebace7207aa55935e0adc8194448cf6755037e31435df0c4cd50f08b7cccf59f196dd9ee47260f265b5371b9245fd635ebf5e2e10b1410b7c2c16f674c92da46cc7e03a007772dab08cb2849311197620d739c063ae3196e952ebcc1b217bc08d4ded4cf2a279cee"}, @NL80211_FTM_RESP_ATTR_LCI={0x8, 0x2, "b0cd3527"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x2c, 0x80, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x74, 0x62}}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @dsss={0x3, 0x1, 0x78}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x2c, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @channel_switch={0x25, 0x3, {0x0, 0xa1, 0x20}}, @gcr_ga={0xbd, 0x6, @broadcast}, @chsw_timing={0x68, 0x4, {0x6, 0x8000}}, @peer_mgmt={0x75, 0x8, {0x0, 0xff46, @val=0x2, @val=0x1a, @void}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x167, 0x7f, [@cf={0x4, 0x6, {0x1c, 0x0, 0x8, 0x8001}}, @chsw_timing={0x68, 0x4, {0x9, 0x5}}, @rann={0x7e, 0x15, {{0x1, 0x41}, 0x7f, 0x2, @device_a, 0x3, 0x6, 0x1ff}}, @dsss={0x3, 0x1, 0x38}, @random_vendor={0xdd, 0xf7, "2060968d8ab2e833c214c1560c38b767de7eef67488d192e6c6d982745b17118a67f73bdcaec3cb22306819270c3ec0a91970a14bcfe14ff529b902450be36358ae37046795fc7af26f0e323ee66f46ac2d9666722e65408569d65a296b875166b54460081b3f2ea6c1322db4346ce12bab5b48574527a8858b1359bb2651212a18a6ff44292f109b289e6e4d32c3191e36832a18d7e7cfb81ee3482aa12da7d6874b3eda3cb24ce71c9674c424e1d93ab18c7bf9a856e8ac113261afb9c81cb119d400e692476cfea5aaa69b0d4b4712f12754afd17bb99da334d9f034ea2bcc3ac5135b8a3d4c4c56fa28cfe0d1cba58452ff5740f5a"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @chsw_timing={0x68, 0x4, {0x0, 0x2}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0xb6, 0x41}}, @ht={0x2d, 0x1a, {0x40, 0x3, 0x7, 0x0, {0x7fff, 0x4, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x8, 0x8, 0x28}}, @link_id={0x65, 0x12, {@random="115f3e3a636e", @device_a, @device_b}}]}]}, 0x24cc}, 0x1, 0x0, 0x0, 0x4040146}, 0x80) [ 2257.786199] blktrace: Concurrent blktraces are not allowed on loop8 [ 2257.821921] kauditd_printk_skb: 16 callbacks suppressed [ 2257.821936] audit: type=1326 audit(1749461081.612:3340): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2257.828420] audit: type=1326 audit(1749461081.619:3341): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2257.853688] audit: type=1326 audit(1749461081.635:3342): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2257.876431] loop0: detected capacity change from 0 to 135266304 [ 2257.885980] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2257.888170] EXT4-fs (loop0): group descriptors corrupted! [ 2257.898070] audit: type=1326 audit(1749461081.644:3343): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 09:24:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="a4000000000000000000bbbbbbbbbbbb0f33cc37c440edbd15ff36071586911668862375f232ab18daa90053aa01df8c874a86d72e0ca79ac04d8c70921ceb5461410a4f64daf57b64089bad046b6b64ee16521f8adfde49f8fbe342365c5adf37b81bd4eeb8a418ed4d3e84c1ff2548850919d7c688c5ebf6661c305bc6af71e438ecfb77cf55aa54300dfe153775dc1bf3103f734538485d63886686a635adab0990109730242ce380ee88eb52cabb1fb6efa8426b90228a1b05f030ede0cd85f07bd76e6e5c1eb2c07c8f410132c9f524a0ab9ace3a1f1a3fb5495175f000eb71ff96200d49fc63eace07b5c80ac4c7320de8c059ab2b51bcab69e5d6a52324a9abff513ed1fce4d45ce815ec7f4727ad4ff0e632b2da659a6c2c29385a"], 0x34) [ 2257.931623] loop0: detected capacity change from 0 to 135266304 [ 2257.940013] audit: type=1326 audit(1749461081.662:3344): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04e1780b19 code=0x7ffc0000 [ 2257.941730] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2257.946594] EXT4-fs (loop0): group descriptors corrupted! 09:24:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) 09:24:41 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x20, 0x181400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, r1, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1c71c71c, 0x9, 0x0, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2257.970999] audit: type=1326 audit(1749461081.663:3345): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04e1780ad7 code=0x7ffc0000 09:24:41 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(0xffffffffffffffff, 0x1c, 0x688, 0xbb5c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aa32a6f77279cc31ac2ee31a7ec60ccfb0a3865fd49ae186382199dd8e3bff96a02306a20e6c6cbd535d3a4dafca0200f37cd8583ac0cd16a22210e36c33a063baaf904ddb7ee5d593a2ac4187d526705ac55bc3930621a0bf651e45612eef00080000846d91866b7edaf3fde9e42c18a7ac0e74484fcdf468f95b481a59000000"]) [ 2257.987772] audit: type=1326 audit(1749461081.663:3346): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2257.997221] audit: type=1326 audit(1749461081.663:3347): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2258.003762] audit: type=1326 audit(1749461081.681:3348): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 [ 2258.010935] audit: type=1326 audit(1749461081.681:3349): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f04e1733ab7 code=0x7ffc0000 09:24:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x8084) set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0xffffffffffffffff, &(0x7f0000000400)=&(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f0000000200)}}, &(0x7f0000000440)=0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) 09:24:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(r2, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r2, 0x0, 0x0, 0x200}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x9, 0x2, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000881) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x14) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x80464c453f) [ 2258.069633] blktrace: Concurrent blktraces are not allowed on loop8 09:24:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@min_batch_time}]}) 09:24:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2201) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="b67fffff3200db23216d1af91e3b146347ad33282d07b34e07e494c5b2d969296bc89a05c908716214247d46b7cbd4cbf92bdff63466fd6e696fde221ff506b4741d01b7100e93541324563e17f7ab35d77b6bb10fe756ae6f1071b7f7627a23cb9d9b45b1a4a8a9f1"]) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40086607, &(0x7f0000000080)) read$snapshot(r3, &(0x7f0000000080)=""/218, 0xda) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000bbbbbbbbbbbb0f33cc42c440edbd15ff3607158691001e97a8aa8c"], 0x34) [ 2258.101030] loop0: detected capacity change from 0 to 135266304 09:24:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) [ 2258.111643] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2258.113627] EXT4-fs (loop0): group descriptors corrupted! [ 2258.139734] loop0: detected capacity change from 0 to 135266304 09:24:41 executing program 5: set_robust_list(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x18) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x800000, 0x3, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x346f, 0x0) readv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000300)=""/140, 0x8c}], 0x4) [ 2258.157746] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2258.159832] EXT4-fs (loop0): group descriptors corrupted! [ 2258.171750] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2258.173992] sr 1:0:0:0: [sg1] tag#0 CDB: Read attributes 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.920187] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2261.921731] CPU: 1 PID: 286 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2261.922498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2261.923389] Call Trace: [ 2261.923688] dump_stack+0x107/0x167 [ 2261.924088] dump_header+0x107/0x689 [ 2261.924489] oom_kill_process.cold+0x10/0x15 [ 2261.924966] out_of_memory+0x1149/0x1440 [ 2261.925405] ? oom_killer_disable+0x280/0x280 [ 2261.925893] ? mutex_trylock+0x237/0x2b0 [ 2261.926356] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 2261.926992] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 2261.927628] ? lock_acquire+0x177/0x470 [ 2261.928063] ? warn_alloc+0x190/0x190 [ 2261.928515] __alloc_pages_nodemask+0x51d/0x600 [ 2261.929016] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2261.929700] ? find_get_entry+0x2c8/0x740 [ 2261.930153] alloc_pages_current+0x187/0x280 [ 2261.930624] __page_cache_alloc+0x2d2/0x360 [ 2261.931118] pagecache_get_page+0x2c7/0xc80 [ 2261.931587] filemap_fault+0x177d/0x2210 [ 2261.932062] ? read_cache_page_gfp+0x30/0x30 [ 2261.932568] ? replace_page_cache_page+0x1200/0x1200 [ 2261.933114] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2261.933678] ext4_filemap_fault+0x87/0xc0 [ 2261.934123] __do_fault+0x113/0x410 [ 2261.934539] handle_mm_fault+0x1e53/0x3500 [ 2261.935000] ? __pmd_alloc+0x5e0/0x5e0 [ 2261.935421] ? vmacache_find+0x55/0x2a0 [ 2261.935849] ? vmacache_update+0xce/0x140 [ 2261.936303] do_user_addr_fault+0x56e/0xc60 [ 2261.936773] exc_page_fault+0xa2/0x1a0 [ 2261.937216] ? asm_exc_page_fault+0x8/0x30 [ 2261.937670] asm_exc_page_fault+0x1e/0x30 [ 2261.938137] RIP: 0033:0x7f805ff30688 [ 2261.938539] Code: Unable to access opcode bytes at RIP 0x7f805ff3065e. [ 2261.939280] RSP: 002b:00007ffd0261cd40 EFLAGS: 00010206 [ 2261.939852] RAX: 0000001b2d620000 RBX: 0000000000000350 RCX: 0000000000227c20 [ 2261.940672] RDX: 0000000000227ed7 RSI: 00007ffd0261ce00 RDI: 0000000000000001 [ 2261.941434] RBP: 00007ffd0261cd9c R08: 00000000000008d4 R09: 00007ffd027d0080 [ 2261.942199] R10: 00007ffd027d0090 R11: 000000000040f12c R12: 0000000000000032 [ 2261.943011] R13: 0000000000227429 R14: 000000000000000a R15: 00007ffd0261ce00 [ 2261.943865] Mem-Info: [ 2261.944152] active_anon:19916 inactive_anon:57661 isolated_anon:0 [ 2261.944152] active_file:4 inactive_file:471 isolated_file:0 [ 2261.944152] unevictable:0 dirty:0 writeback:0 [ 2261.944152] slab_reclaimable:8932 slab_unreclaimable:61517 [ 2261.944152] mapped:69635 shmem:121 pagetables:1855 bounce:0 [ 2261.944152] free:2460 free_pcp:62 free_cma:0 [ 2261.947532] Node 0 active_anon:79664kB inactive_anon:230644kB active_file:16kB inactive_file:1796kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:278540kB dirty:0kB writeback:0kB shmem:484kB writeback_tmp:0kB kernel_stack:4480kB all_unreclaimable? yes [ 2261.950029] Node 0 DMA free:6472kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2261.952807] lowmem_reserve[]: 0 1616 1616 1616 [ 2261.953334] Node 0 DMA32 free:3368kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:79664kB inactive_anon:230644kB active_file:20kB inactive_file:1952kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:7420kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2261.956388] lowmem_reserve[]: 0 0 0 0 [ 2261.956814] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6472kB [ 2261.958271] Node 0 DMA32: 392*4kB (ME) 85*8kB (M) 28*16kB (M) 9*32kB (UM) 6*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3368kB [ 2261.959748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2261.960665] 631 total pagecache pages [ 2261.961084] 0 pages in swap cache [ 2261.961452] Swap cache stats: add 0, delete 0, find 0/0 [ 2261.962028] Free swap = 0kB [ 2261.962348] Total swap = 0kB [ 2261.962670] 524158 pages RAM [ 2261.963006] 0 pages HighMem/MovableOnly [ 2261.963427] 105068 pages reserved [ 2261.963798] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0,global_oom,task_memcg=/syz4,task=syz-executor.4,pid=286,uid=0 [ 2261.965722] Out of memory (oom_kill_allocating_task): Killed process 286 (syz-executor.4) total-vm:93280kB, anon-rss:400kB, file-rss:33784kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 2263.543943] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 2263.545250] CPU: 0 PID: 102 Comm: systemd-journal Not tainted 5.10.238 #1 [ 2263.546056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2263.547028] Call Trace: [ 2263.547347] dump_stack+0x107/0x167 [ 2263.547783] dump_header+0x107/0x689 [ 2263.548232] oom_kill_process.cold+0x10/0x15 [ 2263.548764] out_of_memory+0x1149/0x1440 [ 2263.549244] ? oom_killer_disable+0x280/0x280 [ 2263.549772] ? mutex_trylock+0x237/0x2b0 [ 2263.550249] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 2263.550942] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 2263.551646] ? lock_acquire+0x177/0x470 [ 2263.552127] ? warn_alloc+0x190/0x190 [ 2263.552590] __alloc_pages_nodemask+0x51d/0x600 [ 2263.553133] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2263.553831] ? find_get_entry+0x2c8/0x740 [ 2263.554325] alloc_pages_current+0x187/0x280 [ 2263.554843] __page_cache_alloc+0x2d2/0x360 [ 2263.555341] pagecache_get_page+0x2c7/0xc80 [ 2263.555849] filemap_fault+0x177d/0x2210 [ 2263.556328] ? read_cache_page_gfp+0x30/0x30 [ 2263.556851] ? handle_mm_fault+0x28b1/0x3500 [ 2263.557371] ? lock_downgrade+0x6d0/0x6d0 [ 2263.557858] ext4_filemap_fault+0x87/0xc0 [ 2263.558342] __do_fault+0x113/0x410 [ 2263.558770] handle_mm_fault+0x1e53/0x3500 [ 2263.559268] ? fsnotify+0x1570/0x1570 [ 2263.559709] ? find_held_lock+0x2c/0x110 [ 2263.560189] ? __pmd_alloc+0x5e0/0x5e0 [ 2263.560652] ? vmacache_find+0x55/0x2a0 [ 2263.561117] ? vmacache_update+0xce/0x140 [ 2263.561592] do_user_addr_fault+0x56e/0xc60 [ 2263.562106] exc_page_fault+0xa2/0x1a0 [ 2263.562560] ? asm_exc_page_fault+0x8/0x30 [ 2263.563051] asm_exc_page_fault+0x1e/0x30 [ 2263.563519] RIP: 0033:0x7fac4b9eae4c [ 2263.563967] Code: Unable to access opcode bytes at RIP 0x7fac4b9eae22. [ 2263.564743] RSP: 002b:00007ffc6c46dbf0 EFLAGS: 00010246 [ 2263.565368] RAX: 000000000000004c RBX: 00007fac4bb052c0 RCX: 0000000000000000 [ 2263.566176] RDX: 0000000000000000 RSI: 00007ffc6c46e108 RDI: 0000000000000000 [ 2263.567014] RBP: 00007ffc6c46e140 R08: 00000000ffffffff R09: 000000000000001c [ 2263.567846] R10: 0000000000000000 R11: 0000000000000000 R12: 00007ffc6c46e150 [ 2263.568664] R13: 0000556a85271208 R14: 00007ffc6c46e290 R15: 000000000000006c [ 2263.569572] Mem-Info: [ 2263.569889] active_anon:19915 inactive_anon:57374 isolated_anon:0 [ 2263.569889] active_file:18 inactive_file:452 isolated_file:0 [ 2263.569889] unevictable:0 dirty:0 writeback:0 [ 2263.569889] slab_reclaimable:8928 slab_unreclaimable:61082 [ 2263.569889] mapped:69634 shmem:121 pagetables:1534 bounce:0 [ 2263.569889] free:2245 free_pcp:0 free_cma:0 [ 2263.573532] Node 0 active_anon:79660kB inactive_anon:229496kB active_file:72kB inactive_file:1740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:484kB writeback_tmp:0kB kernel_stack:4224kB all_unreclaimable? yes [ 2263.576249] Node 0 DMA free:6472kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2263.579278] lowmem_reserve[]: 0 1616 1616 1616 [ 2263.579834] Node 0 DMA32 free:2508kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:79660kB inactive_anon:229496kB active_file:0kB inactive_file:1716kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:6136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2263.583174] lowmem_reserve[]: 0 0 0 0 [ 2263.583636] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6472kB [ 2263.585185] Node 0 DMA32: 421*4kB (UME) 61*8kB (UM) 19*16kB (UM) 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2508kB [ 2263.586776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2263.587773] 611 total pagecache pages [ 2263.588245] 0 pages in swap cache [ 2263.588647] Swap cache stats: add 0, delete 0, find 0/0 [ 2263.589265] Free swap = 0kB [ 2263.589620] Total swap = 0kB [ 2263.589997] 524158 pages RAM [ 2263.590349] 0 pages HighMem/MovableOnly [ 2263.590812] 105068 pages reserved [ 2263.591222] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=102,uid=0 [ 2263.593477] Out of memory (oom_kill_allocating_task): Killed process 102 (systemd-journal) total-vm:40072kB, anon-rss:904kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:108kB oom_score_adj:-250 [ 2263.713371] oom_reaper: reaped process 12072 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2263.920869] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2263.922048] CPU: 0 PID: 9140 Comm: syz-fuzzer Not tainted 5.10.238 #1 [ 2263.922801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2263.923746] Call Trace: [ 2263.924058] dump_stack+0x107/0x167 [ 2263.924478] dump_header+0x107/0x689 [ 2263.924912] oom_kill_process.cold+0x10/0x15 [ 2263.925421] out_of_memory+0x1149/0x1440 [ 2263.925900] ? oom_killer_disable+0x280/0x280 [ 2263.926424] ? mutex_trylock+0x237/0x2b0 [ 2263.926891] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 2263.927578] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 2263.928289] ? lock_acquire+0x177/0x470 [ 2263.928756] ? warn_alloc+0x190/0x190 [ 2263.929213] __alloc_pages_nodemask+0x51d/0x600 [ 2263.929754] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2263.930459] ? find_get_entry+0x2c8/0x740 [ 2263.930938] alloc_pages_current+0x187/0x280 [ 2263.931451] __page_cache_alloc+0x2d2/0x360 [ 2263.931952] pagecache_get_page+0x2c7/0xc80 [ 2263.932464] filemap_fault+0x177d/0x2210 [ 2263.932935] ? read_cache_page_gfp+0x30/0x30 [ 2263.933452] ? replace_page_cache_page+0x1200/0x1200 [ 2263.934041] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2263.934637] ext4_filemap_fault+0x87/0xc0 [ 2263.935116] __do_fault+0x113/0x410 [ 2263.935532] handle_mm_fault+0x1e53/0x3500 [ 2263.936034] ? ep_read_events_proc+0x3d0/0x3d0 [ 2263.936563] ? __pmd_alloc+0x5e0/0x5e0 [ 2263.937013] ? vmacache_find+0x55/0x2a0 [ 2263.937487] do_user_addr_fault+0x56e/0xc60 [ 2263.937982] exc_page_fault+0xa2/0x1a0 [ 2263.938433] ? asm_exc_page_fault+0x8/0x30 [ 2263.938913] asm_exc_page_fault+0x1e/0x30 [ 2263.939392] RIP: 0033:0x4666e0 [ 2263.939754] Code: Unable to access opcode bytes at RIP 0x4666b6. [ 2263.940468] RSP: 002b:000000c00cc597f0 EFLAGS: 00010246 [ 2263.941071] RAX: 0000000000000000 RBX: 0000000000000381 RCX: 00000000004666e0 [ 2263.941906] RDX: 0000000000000080 RSI: 000000c00cc59840 RDI: 0000000000000003 [ 2263.942716] RBP: 000000c00cc59e40 R08: 0000000000000000 R09: 0000000000000000 [ 2263.943553] R10: 0000000000000381 R11: 0000000000000246 R12: 0000000000000003 [ 2263.944373] R13: 000000c0006e1080 R14: 0000021954cd0ab7 R15: 0000000000000039 [ 2263.945308] Mem-Info: [ 2263.945610] active_anon:19915 inactive_anon:57331 isolated_anon:0 [ 2263.945610] active_file:25 inactive_file:453 isolated_file:0 [ 2263.945610] unevictable:0 dirty:0 writeback:0 [ 2263.945610] slab_reclaimable:8928 slab_unreclaimable:61082 [ 2263.945610] mapped:69634 shmem:121 pagetables:1534 bounce:0 [ 2263.945610] free:2288 free_pcp:0 free_cma:0 [ 2263.949193] Node 0 active_anon:79660kB inactive_anon:229324kB active_file:100kB inactive_file:1844kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:278536kB dirty:0kB writeback:0kB shmem:484kB writeback_tmp:0kB kernel_stack:4224kB all_unreclaimable? yes [ 2263.951858] Node 0 DMA free:6472kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2263.955433] lowmem_reserve[]: 0 1616 1616 1616 [ 2263.956064] Node 0 DMA32 free:2680kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:79660kB inactive_anon:229324kB active_file:104kB inactive_file:1816kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:6136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2263.959288] lowmem_reserve[]: 0 0 0 0 [ 2263.959740] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6472kB [ 2263.961250] Node 0 DMA32: 454*4kB (UME) 66*8kB (UM) 19*16kB (UM) 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2680kB [ 2263.962794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2263.963764] 611 total pagecache pages [ 2263.964216] 0 pages in swap cache [ 2263.964606] Swap cache stats: add 0, delete 0, find 0/0 [ 2263.965225] Free swap = 0kB [ 2263.965569] Total swap = 0kB [ 2263.965930] 524158 pages RAM [ 2263.966272] 0 pages HighMem/MovableOnly [ 2263.966719] 105068 pages reserved [ 2263.967130] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=9140,uid=0 [ 2263.969483] Out of memory (oom_kill_allocating_task): Killed process 254 (syz-fuzzer) total-vm:1308760kB, anon-rss:271704kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:1016kB oom_score_adj:0 [ 2264.383158] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 2264.385240] systemd[1]: systemd-journald.service: Failed with result 'oom-kill'. [ 2264.403320] systemd[1]: systemd-journald.service: Consumed 12.265s CPU time. [ 2264.410805] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 2264.442958] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2264.496790] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2264.654384] systemd[1]: ssh.service: Failed with result 'oom-kill'. [ 2264.663571] systemd[1]: ssh.service: Unit process 248 (sshd) remains running after unit stopped. [ 2264.907238] systemd[1]: ssh.service: Consumed 32min 29.811s CPU time. [ 2265.430845] kworker/u4:1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2265.432349] CPU: 1 PID: 59 Comm: kworker/u4:1 Not tainted 5.10.238 #1 [ 2265.433089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.433992] Workqueue: netns cleanup_net [ 2265.434424] Call Trace: [ 2265.434724] dump_stack+0x107/0x167 [ 2265.435146] dump_header+0x107/0x689 [ 2265.435570] oom_kill_process.cold+0x10/0x15 [ 2265.436086] out_of_memory+0x358/0x1440 [ 2265.436542] ? oom_killer_disable+0x280/0x280 [ 2265.437053] ? mutex_trylock+0x237/0x2b0 [ 2265.437513] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 2265.438180] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 2265.438848] ? lock_acquire+0x177/0x470 [ 2265.439301] ? warn_alloc+0x190/0x190 [ 2265.439744] __alloc_pages_nodemask+0x51d/0x600 [ 2265.440280] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2265.440973] alloc_pages_current+0x187/0x280 [ 2265.441473] allocate_slab+0x29b/0x380 [ 2265.441918] ___slab_alloc+0x470/0x700 [ 2265.442360] ? __alloc_skb+0x6d/0x5b0 [ 2265.442782] ? __alloc_skb+0x6d/0x5b0 [ 2265.443213] ? kmem_cache_alloc_node+0x313/0x330 [ 2265.443747] ? __alloc_skb+0x6d/0x5b0 [ 2265.444184] kmem_cache_alloc_node+0x313/0x330 [ 2265.444681] __alloc_skb+0x6d/0x5b0 [ 2265.445100] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 2265.445620] unregister_netdevice_many+0x8e3/0x1490 [ 2265.446186] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2265.446728] ? netdev_pick_tx+0xc70/0xc70 [ 2265.447193] ? unregister_netdevice_queue+0x16a/0x2c0 [ 2265.447751] ? wait_for_completion_io+0x270/0x270 [ 2265.448307] ? ieee80211_unregister_hw+0x3f/0x210 [ 2265.448854] ? ieee80211_txq_teardown_flows+0x16/0x290 [ 2265.449451] ieee80211_remove_interfaces+0x2d0/0x610 [ 2265.450001] ? ieee80211_sdata_stop+0x90/0x90 [ 2265.450509] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2265.451087] ieee80211_unregister_hw+0x47/0x210 [ 2265.451614] hwsim_exit_net+0x39c/0x730 [ 2265.452075] ? __rhashtable_remove_fast.constprop.0.isra.0+0xf00/0xf00 [ 2265.452822] ? sit_exit_batch_net+0x482/0x570 [ 2265.453339] ? __rhashtable_remove_fast.constprop.0.isra.0+0xf00/0xf00 [ 2265.454079] ops_exit_list+0xb3/0x180 [ 2265.454495] cleanup_net+0x533/0xa30 [ 2265.454920] ? unregister_pernet_device+0x70/0x70 [ 2265.455473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2265.456080] process_one_work+0x9a9/0x14b0 [ 2265.456561] ? lock_release+0x680/0x680 [ 2265.457008] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2265.457536] ? rwlock_bug.part.0+0x90/0x90 [ 2265.458022] worker_thread+0x61d/0x1310 [ 2265.458480] ? process_one_work+0x14b0/0x14b0 [ 2265.458987] kthread+0x38f/0x470 [ 2265.459368] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2265.459873] ? __kthread_bind_mask+0xc0/0xc0 [ 2265.460382] ret_from_fork+0x22/0x30 [ 2265.460813] Mem-Info: [ 2265.461122] active_anon:39 inactive_anon:7480 isolated_anon:0 [ 2265.461122] active_file:4 inactive_file:0 isolated_file:0 [ 2265.461122] unevictable:0 dirty:0 writeback:0 [ 2265.461122] slab_reclaimable:7939 slab_unreclaimable:59265 [ 2265.461122] mapped:8705 shmem:82 pagetables:319 bounce:0 [ 2265.461122] free:2308 free_pcp:123 free_cma:0 [ 2265.464570] Node 0 active_anon:156kB inactive_anon:29920kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34820kB dirty:0kB writeback:0kB shmem:328kB writeback_tmp:0kB kernel_stack:2880kB all_unreclaimable? yes [ 2265.467101] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2265.470019] lowmem_reserve[]: 0 1616 1616 1616 [ 2265.470557] Node 0 DMA32 free:2820kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:156kB inactive_anon:29920kB active_file:16kB inactive_file:72kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:1276kB bounce:0kB free_pcp:544kB local_pcp:244kB free_cma:0kB [ 2265.473749] lowmem_reserve[]: 0 0 0 0 [ 2265.474214] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 2265.475780] Node 0 DMA32: 225*4kB (UME) 89*8kB (UM) 30*16kB (UME) 16*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2604kB [ 2265.477353] syz-executor.4: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 2265.477367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2265.477382] ,cpuset= [ 2265.478415] 104 total pagecache pages [ 2265.478435] 0 pages in swap cache [ 2265.478442] Swap cache stats: add 0, delete 0, find 0/0 [ 2265.478447] Free swap = 0kB [ 2265.478456] Total swap = 0kB [ 2265.478462] 524158 pages RAM [ 2265.478467] 0 pages HighMem/MovableOnly [ 2265.479850] syz4 [ 2265.480102] 105068 pages reserved [ 2265.480150] Unreclaimable slab info: [ 2265.480950] ,mems_allowed=0 [ 2265.481682] Name Used Total [ 2265.481717] pid_3 7KB 7KB [ 2265.482318] CPU: 0 PID: 12072 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2265.482652] pid_2 62KB 78KB [ 2265.483000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.483004] Call Trace: [ 2265.483026] dump_stack+0x107/0x167 [ 2265.483355] IEEE-802.15.4-MAC 63KB 63KB [ 2265.483806] warn_alloc.cold+0x95/0x18a [ 2265.484042] IEEE-802.15.4-RAW 63KB 63KB [ 2265.484428] ? zone_watermark_ok_safe+0x260/0x260 [ 2265.484841] ip6-frags 7KB 7KB [ 2265.485178] ? schedule_timeout+0x1ce/0x380 [ 2265.485788] fib6_nodes 28KB 28KB [ 2265.486383] ? usleep_range+0x170/0x170 [ 2265.486398] ? __next_timer_interrupt+0x2c0/0x2c0 [ 2265.487175] ip6_dst_cache 48KB 48KB [ 2265.487770] ? 0xffffffff81000000 [ 2265.489136] PINGv6 63KB 63KB [ 2265.489419] __alloc_pages_slowpath.constprop.0+0x1cbe/0x2200 [ 2265.490042] RAWv6 315KB 315KB [ 2265.490445] ? lock_acquire+0x177/0x470 [ 2265.491015] UDPLITEv6 62KB 62KB [ 2265.491551] ? warn_alloc+0x190/0x190 [ 2265.492160] UDPv6 62KB 62KB [ 2265.492648] __alloc_pages_nodemask+0x51d/0x600 [ 2265.493213] tw_sock_TCPv6 15KB 15KB [ 2265.493645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2265.493659] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2265.494178] TCPv6 62KB 62KB [ 2265.494770] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2265.495161] nf_conntrack 7KB 7KB [ 2265.495747] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2265.495765] ? alloc_pages_current+0x14f/0x280 [ 2265.496394] scsi_sense_cache 8KB 8KB [ 2265.496981] ? alloc_pages_current+0x15a/0x280 [ 2265.496995] alloc_pages_current+0x187/0x280 [ 2265.497410] sd_ext_cdb 3KB 3KB [ 2265.498006] ? __sanitizer_cov_trace_pc+0x55/0x60 [ 2265.498020] relay_open_buf.part.0+0x2a5/0xc00 [ 2265.498426] virtio_scsi_cmd 16KB 16KB [ 2265.499029] relay_open+0x531/0xa10 [ 2265.499047] do_blk_trace_setup+0x4cf/0xc10 [ 2265.499562] sgpool-128 59KB 59KB [ 2265.500164] ? _copy_from_user+0xfb/0x1b0 [ 2265.500177] __blk_trace_setup+0xca/0x180 [ 2265.500759] sgpool-64 63KB 63KB [ 2265.501362] ? do_blk_trace_setup+0xc10/0xc10 [ 2265.501386] blk_trace_ioctl+0x155/0x290 [ 2265.501976] sgpool-32 267KB 267KB [ 2265.502644] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 2265.503250] sgpool-16 135KB 135KB [ 2265.503846] ? do_vfs_ioctl+0x283/0x10d0 [ 2265.503860] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2265.504383] sgpool-8 56KB 56KB [ 2265.504973] ? generic_block_fiemap+0x60/0x60 [ 2265.504986] ? lock_downgrade+0x6d0/0x6d0 [ 2265.505490] io_kiocb 75KB 93KB [ 2265.505986] blkdev_ioctl+0xc1/0x710 [ 2265.505999] ? blkdev_common_ioctl+0x1930/0x1930 [ 2265.506589] mqueue_inode_cache 62KB 62KB [ 2265.507130] ? selinux_file_ioctl+0xb6/0x270 [ 2265.507146] block_ioctl+0xf9/0x140 [ 2265.507650] nfs_commit_data 15KB 15KB [ 2265.508250] ? blkdev_read_iter+0x1c0/0x1c0 [ 2265.508266] __x64_sys_ioctl+0x19a/0x210 [ 2265.508671] nfs_write_data 47KB 47KB [ 2265.509157] do_syscall_64+0x33/0x40 [ 2265.509171] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.509741] jbd2_inode 7KB 7KB [ 2265.510202] RIP: 0033:0x7f805ff83b19 [ 2265.510215] Code: Unable to access opcode bytes at RIP 0x7f805ff83aef. [ 2265.510654] ext4_system_zone 7KB 7KB [ 2265.511251] RSP: 002b:00007f805d4d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2265.511266] RAX: ffffffffffffffda RBX: 00007f8060097020 RCX: 00007f805ff83b19 [ 2265.511743] ext4_io_end_vec 11KB 11KB [ 2265.512201] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 2265.512208] RBP: 00007f805ffddf6d R08: 0000000000000000 R09: 0000000000000000 [ 2265.512218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2265.512812] ext4_bio_post_read_ctx 15KB 15KB [ 2265.513356] R13: 00007ffd0261caef R14: 00007f805d4d8300 R15: 0000000000022000 [ 2265.513626] Mem-Info: [ 2265.513949] kioctx 31KB 31KB [ 2265.513957] aio_kiocb 7KB 7KB [ 2265.513968] bio-2 4KB 4KB [ 2265.513978] fasync_cache 7KB 7KB [ 2265.514447] active_anon:39 inactive_anon:7480 isolated_anon:0 [ 2265.514447] active_file:4 inactive_file:0 isolated_file:0 [ 2265.514447] unevictable:0 dirty:0 writeback:0 [ 2265.514447] slab_reclaimable:7918 slab_unreclaimable:59195 [ 2265.514447] mapped:8705 shmem:82 pagetables:319 bounce:0 [ 2265.514447] free:2327 free_pcp:136 free_cma:0 [ 2265.515000] pid_namespace 7KB 7KB [ 2265.515009] posix_timers_cache 15KB 15KB [ 2265.515616] Node 0 active_anon:156kB inactive_anon:29920kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34820kB dirty:0kB writeback:0kB shmem:328kB writeback_tmp:0kB kernel_stack:2880kB all_unreclaimable? yes [ 2265.516100] rpc_buffers 31KB 31KB [ 2265.516110] rpc_tasks 3KB 3KB [ 2265.516571] Node 0 [ 2265.517149] UNIX 320KB 320KB [ 2265.517160] UDP-Lite 31KB 31KB [ 2265.517583] DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2265.517589] lowmem_reserve[]: [ 2265.518102] tcp_bind_bucket 8KB 8KB [ 2265.518113] xfrm_state 32KB 32KB [ 2265.518709] 0 1616 [ 2265.519197] ip_fib_trie 8KB 8KB [ 2265.519206] ip_fib_alias 19KB 19KB [ 2265.519612] 1616 1616 [ 2265.520207] ip_dst_cache 40KB 40KB [ 2265.520217] PING 31KB 31KB [ 2265.520693] [ 2265.520700] Node 0 [ 2265.521146] RAW 125KB 125KB [ 2265.521156] UDP 315KB 315KB [ 2265.521761] DMA32 free:2820kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:156kB inactive_anon:29920kB active_file:16kB inactive_file:72kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:1276kB bounce:0kB free_pcp:544kB local_pcp:300kB free_cma:0kB [ 2265.521768] lowmem_reserve[]: [ 2265.522179] tw_sock_TCP 7KB 7KB [ 2265.522188] request_sock_TCP 15KB 15KB [ 2265.522769] 0 0 [ 2265.523357] TCP 60KB 60KB [ 2265.523367] hugetlbfs_inode_cache 30KB 30KB [ 2265.523775] 0 0 [ 2265.524505] bio-1 11KB 11KB [ 2265.524514] eventpoll_pwq 19KB 19KB [ 2265.525123] [ 2265.525946] eventpoll_epi 43KB 43KB [ 2265.525955] inotify_inode_mark 46KB 46KB [ 2265.526755] Node 0 DMA: [ 2265.527341] request_queue 60KB 60KB [ 2265.527350] blkdev_ioc 45KB 45KB [ 2265.528177] 0*4kB [ 2265.528946] bio-0 228KB 228KB [ 2265.528957] biovec-max 361KB 743KB [ 2265.529753] 1*8kB (U) [ 2265.530382] biovec-128 31KB 31KB [ 2265.530392] biovec-64 330KB 330KB [ 2265.531207] 1*16kB [ 2265.531466] biovec-16 33KB 33KB [ 2265.532075] (U) [ 2265.532638] user_namespace 31KB 31KB [ 2265.533241] 0*32kB [ 2265.533807] uid_cache 8KB 8KB [ 2265.537302] 1*64kB (U) [ 2265.538051] dmaengine-unmap-2 4KB 4KB [ 2265.538664] 0*128kB 1*256kB [ 2265.541747] audit_buffer 7KB 7KB [ 2265.542371] (U) 0*512kB [ 2265.543126] skbuff_fclone_cache 161KB 202KB [ 2265.543372] 0*1024kB 1*2048kB [ 2265.544141] skbuff_head_cache 783KB 783KB [ 2265.544745] (M) 1*4096kB [ 2265.548181] file_lock_cache 20KB 47KB [ 2265.548525] (M) = 6488kB [ 2265.549277] file_lock_ctx 7KB 7KB [ 2265.549890] Node 0 DMA32: [ 2265.550210] fsnotify_mark_connector 20KB 20KB [ 2265.550817] 225*4kB [ 2265.551554] net_namespace 166KB 172KB [ 2265.551831] (UME) 89*8kB [ 2265.552591] task_delay_info 75KB 108KB [ 2265.553198] (UM) 30*16kB [ 2265.553435] taskstats 84KB 84KB [ 2265.553685] (UME) 16*32kB [ 2265.554442] proc_dir_entry 466KB 487KB [ 2265.555053] (U) 0*64kB [ 2265.558802] pde_opener 35KB 35KB [ 2265.559168] 0*128kB 0*256kB [ 2265.559911] seq_file 78KB 78KB [ 2265.560528] 0*512kB 0*1024kB [ 2265.560810] sigqueue 31KB 35KB [ 2265.561430] 0*2048kB 0*4096kB [ 2265.562228] shmem_inode_cache 1245KB 1289KB [ 2265.562446] = 2604kB [ 2265.562459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2265.563201] kernfs_iattrs_cache 231KB 231KB [ 2265.563806] 104 total pagecache pages [ 2265.563814] 0 pages in swap cache [ 2265.564069] kernfs_node_cache 5623KB 5623KB [ 2265.564679] Swap cache stats: add 0, delete 0, find 0/0 [ 2265.564688] Free swap = 0kB [ 2265.565449] mnt_cache 194KB 204KB [ 2265.565746] Total swap = 0kB [ 2265.565755] 524158 pages RAM [ 2265.566519] filp 887KB 1530KB [ 2265.567117] 0 pages HighMem/MovableOnly [ 2265.567126] 105068 pages reserved [ 2265.567423] names_cache 3723KB 3897KB [ 2265.599381] hashtab_node 278KB 278KB [ 2265.600136] ebitmap_node 1149KB 1149KB [ 2265.600885] avtab_node 4976KB 4976KB [ 2265.601610] avc_node 35KB 35KB [ 2265.602380] lsm_inode_cache 2693KB 3099KB [ 2265.603128] lsm_file_cache 117KB 212KB [ 2265.603867] key_jar 47KB 47KB [ 2265.604594] uts_namespace 15KB 15KB [ 2265.605332] nsproxy 7KB 7KB [ 2265.606077] vm_area_struct 1219KB 1244KB [ 2265.606801] fs_cache 65KB 68KB [ 2265.607545] files_cache 179KB 270KB [ 2265.608291] signal_cache 403KB 524KB [ 2265.609038] sighand_cache 242KB 360KB [ 2265.609761] task_struct 1102KB 1575KB [ 2265.610501] cred_jar 108KB 176KB [ 2265.611242] anon_vma_chain 266KB 295KB [ 2265.611988] anon_vma 221KB 223KB [ 2265.612727] pid 63KB 71KB [ 2265.613470] Acpi-Operand 88KB 122KB [ 2265.614206] Acpi-ParseExt 27KB 27KB [ 2265.614941] Acpi-Parse 35KB 51KB [ 2265.615660] Acpi-State 200KB 216KB [ 2265.616342] Acpi-Namespace 20KB 20KB [ 2265.616963] numa_policy 7KB 7KB [ 2265.617576] trace_event_file 176KB 176KB [ 2265.618195] ftrace_event_field 280KB 280KB [ 2265.618815] pool_workqueue 32KB 32KB [ 2265.619432] task_group 16KB 16KB [ 2265.620061] mm_struct 260KB 346KB [ 2265.620662] vmap_area 94KB 94KB [ 2265.621276] page->ptl 278KB 299KB [ 2265.621889] kmemleak_scan_area 75KB 75KB [ 2265.623651] kmemleak_object 136501KB 154669KB [ 2265.624286] kmalloc-8k 4816KB 4992KB [ 2265.624902] kmalloc-4k 7712KB 8032KB [ 2265.625511] kmalloc-2k 5040KB 5568KB [ 2265.626131] kmalloc-1k 2854KB 3552KB [ 2265.626754] kmalloc-512 3914KB 4976KB [ 2265.627368] kmalloc-256 1417KB 1464KB [ 2265.627982] kmalloc-192 600KB 600KB [ 2265.628603] kmalloc-128 512KB 600KB [ 2265.629240] kmalloc-96 398KB 748KB [ 2265.629887] kmalloc-64 1057KB 1508KB [ 2265.630495] kmalloc-32 775KB 828KB [ 2265.631118] kmalloc-16 368KB 372KB [ 2265.631722] kmalloc-8 316KB 334KB [ 2265.632345] kmem_cache_node 47KB 47KB [ 2265.632961] kmem_cache 75KB 75KB [ 2265.633565] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-udevd.service,task=systemd-udevd,pid=12096,uid=0 [ 2265.635849] Out of memory: Killed process 12096 (systemd-udevd) total-vm:35620kB, anon-rss:10192kB, file-rss:4kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2265.690259] systemd[1]: ssh.service: Scheduled restart job, restart counter is at 1. [ 2265.697498] systemd[1]: Stopped OpenBSD Secure Shell server. [ 2265.702944] systemd[1]: ssh.service: Consumed 32min 29.909s CPU time. [ 2265.709455] systemd[1]: ssh.service: Found left-over process 248 (sshd) in control group while starting unit. Ignoring. [ 2265.710726] systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. [ 2265.750981] systemd[1]: Starting OpenBSD Secure Shell server... [ 2265.753956] systemd[1]: systemd-udevd.service: A process of this unit has been killed by the OOM killer. [ 2265.868365] systemd[1]: systemd-udevd.service: Failed with result 'oom-kill'. [ 2265.881185] systemd[1]: systemd-udevd.service: Consumed 51.879s CPU time. [ 2265.892571] systemd[1]: systemd-journal-flush.service: Succeeded. [ 2265.905584] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2265.907571] systemd[1]: systemd-udevd.service: Scheduled restart job, restart counter is at 1. [ 2265.912792] systemd[1]: Stopped Journal Service. [ 2265.914152] systemd[1]: systemd-journald.service: Consumed 12.265s CPU time. [ 2265.940329] systemd[1]: Starting Journal Service... [ 2265.941062] systemd[1]: Stopped Rule-based Manager for Device Events and Files. [ 2265.942242] systemd[1]: systemd-udevd.service: Consumed 51.879s CPU time. [ 2265.982392] systemd[1]: Starting Rule-based Manager for Device Events and Files... [ 2265.984371] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2266.165018] systemd-journald[12099]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2266.193638] systemd[1]: Started OpenBSD Secure Shell server. [ 2266.280297] systemd[1]: Started Rule-based Manager for Device Events and Files. [ 2266.317602] systemd[1]: Stopped target Bluetooth. [ 2266.450435] systemd[1]: Started Journal Service. [ 2266.506375] systemd-journald[12099]: Received client request to flush runtime journal. VM DIAGNOSIS: 09:24:49 Registers: info registers vcpu 0 RAX=ffff800000000000 RBX=00000000000002fb RCX=ffffffff8126f53b RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff8686e6f8 RBP=0000000000000004 RSP=ffff88801e2e7190 R8 =0000000000000000 R9 =ffffffff8686e6ff R10=fffffbfff0d0dcd4 R11=0000000000000001 R12=ffff88800f980000 R13=0000000000000000 R14=ffff88800f980948 R15=dffffc0000000000 RIP=ffffffff816cd2c9 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fad9c488900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fad9c44f200 CR3=0000000009666000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff00ffffffffffffffffffffff XMM01=707465675f6c697475646f6d6d61705f XMM02=ff000000000000ff0000000000ff0000 XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=000a0d732a2e25006c61746166003367 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800d3d3480 RCX=0000000000000000 RDX=1ffff1100fffb8b9 RSI=000000000002c0cf RDI=ffff88807ffdc5c8 RBP=dffffc0000000000 RSP=ffff888016d97998 R8 =0000000000000000 R9 =0000000000000000 R10=000000000002c0cf R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffea0000b033c0 R15=ffff88807ffdc540 RIP=ffffffff8166219c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005566886e0b04 CR3=000000000cfa2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000