criptors: Block bitmap for group 0 not in group (block 196608)!
[ 1531.510469] EXT4-fs (loop1): group descriptors corrupted!
[ 1531.520150] loop1: detected capacity change from 0 to 4132
[ 1531.522314] loop4: detected capacity change from 0 to 4132
[ 1531.529905] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1531.530905] EXT4-fs (loop1): group descriptors corrupted!
[ 1531.535889] EXT4-fs (loop4): inodes count not valid: 1056 vs 32
20:56:55 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2, 0x600, 0x0)

[ 1531.548802] FAULT_INJECTION: forcing a failure.
[ 1531.548802] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1531.549831] CPU: 1 UID: 0 PID: 11307 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1531.549848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1531.549856] Call Trace:
[ 1531.549860]  <TASK>
[ 1531.549865]  dump_stack_lvl+0xfa/0x120
[ 1531.549891]  should_fail_ex+0x4d7/0x5e0
[ 1531.549908]  strncpy_from_user+0x3b/0x2f0
[ 1531.549927]  getname_flags.part.0+0x8d/0x540
[ 1531.549941]  getname_flags+0x95/0xe0
[ 1531.549955]  do_sys_openat2+0x9f/0x240
[ 1531.549971]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1531.549989]  __x64_sys_openat+0x142/0x200
[ 1531.550000]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1531.550018]  do_syscall_64+0xbf/0x420
[ 1531.550032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1531.550045] RIP: 0033:0x7f73dfce5a04
[ 1531.550055] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1531.550066] RSP: 002b:00007f73dd2a7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1531.550078] RAX: ffffffffffffffda RBX: 00007f73dfd7c970 RCX: 00007f73dfce5a04
[ 1531.550086] RDX: 0000000000000002 RSI: 00007f73dd2a8000 RDI: 00000000ffffff9c
[ 1531.550094] RBP: 00007f73dd2a8000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1531.550101] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1531.550108] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1531.550123]  </TASK>
[ 1531.564910] loop4: detected capacity change from 0 to 4132
[ 1531.573362] EXT4-fs (loop4): inodes count not valid: 1056 vs 32
20:56:55 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:56:55 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x351d, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1531.626330] loop2: detected capacity change from 0 to 4132
[ 1531.636445] EXT4-fs (loop2): inodes count not valid: 5 vs 32
20:56:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200500000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1531.659529] loop1: detected capacity change from 0 to 4132
20:56:55 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000540))
sendmsg(r0, &(0x7f0000000800)={&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000300)="0d960684a9cfbd843a05403f29aa27047bab47d639e5a333f6923fe56e96f114baea4e1fff32707be29e3fd79e787ea83229eef15d945f4b1f9f44ae14bfbaf27af640f2c65cea3bc31f77645291a06934315277d10a11a31f2509aace3da98c2ef3795b00b7a7a52abba553f1b3f4ebbe25c9c1ccc6baa0c0be3a4174bf24322cd21a0ebbe8708c02dcb30e5defa9071dfb44f0e0b0379a198050d5341bd6743c2ea5f5481db39169eb81e5be7183239aca9192e935d2ed4115dd424f78b3a9ca8a2acebe5851677ad3dfa586ff5b1a7262c4de29db8d0ffc150eaa9f39c96144e3894491aec3c06e86f9de4009", 0xee}, {&(0x7f0000000400)="162098ae0585919b3e0e35dc19822e97882b9ab9eba2412a5875bd36b14879593f08192a896acc1378f2ab9db71f31689cf8b62a8a122e1352444636fa95d6337f4faea277950860db9366b995a206b049f0ced991bf22691323a10745a86cdbd5845eeb3ad397e74621eb5232a0dc5eb226ed60d3a09c14ae6dc6ef76aad6d499e0784d087b7af59a4982cd0b79287f34831e42098a6a8f3a862f8b04afe271c16787c4f7e32825aeba2195cfb6032b7f73f7f1fc5d614cfba2c5ac2de4", 0xbe}, {&(0x7f00000004c0)="492d6d5dc93741998a65035bfda90a0b168968f0e498f388c6b447abd7a8c8194dde19cafe472d1e", 0x28}, {&(0x7f0000000500)="244d95f984e9392d704524f626f9f86827a52bb9c5b7aefd655e36594015e4fa91", 0x21}, {&(0x7f0000000540)}, {&(0x7f0000000580)="61796c9dc5e53a4c5c0b0dfd756cf16d5c5c94b4bdca25be1a6d533aedcf230726026ad8e53bef8bffc426acb8df7b20078fd6d00a6085729a26f66d3f3cb8ec189a29bada3c705f40bca7c6215eda774ab015ac79c404733c3f34b603e1592d2da9be0e9c28864b9579361b87a68960d204", 0x72}], 0x6, &(0x7f0000000680)=[{0x28, 0x1a, 0x6, "3471e7fa4bb3ac516e25e0b2a155aa09d3e89bee45f729d9"}, {0x50, 0x84, 0x24fe, "ea357df64502029f7d8655a5700255b913f6eb844ae51503f4f3e6ed7c19f746bbced3cde24f2290a5562eca3b736bdd037be22709c7895701"}, {0x100, 0x105, 0xe33, "640a5fa547fb2d143e9be25a5fbaffcbb0f7c821db26d3557db4d40282da6fa73466adb2a3278ac50fb5d788a03aafc6adc40f889d70acbe7588c59cb1ad4de3b41266eef4e58ec4c8256b8f42240ccfca504556033ec67c24ffb5845fd566f29e2bc5f8e8724c79c2ea3f4f4cf89463edf24005ef823b2484b98df60bfa84b79776d2868fd42302b5ab9eb8805db3ebe5321ae9739acad6f2b7bde510d15b5740c6e439ac9b2a7c9c5264f5413cff7272c3bfbe2d75f0e197b2d2ff5d109f68b7461aee6988653f5212989d5b6b5718a29eb32bf41b95e7ad2c8eacd663d153608ff88e3c68bb87931f"}], 0x178}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)

[ 1531.675586] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1531.676486] EXT4-fs (loop1): group descriptors corrupted!
[ 1531.678735] loop4: detected capacity change from 0 to 4132
[ 1531.689029] EXT4-fs (loop4): inodes count not valid: 1312 vs 32
[ 1531.698272] loop4: detected capacity change from 0 to 4132
20:56:55 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000140))

[ 1531.706012] EXT4-fs (loop4): inodes count not valid: 1312 vs 32
20:57:04 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000140))

20:57:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200600000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:04 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x3)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000040)={@loopback, r5}, 0x14)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', <r8=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000040)={@loopback, r8}, 0x14)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', <r11=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000040)={@loopback, r11}, 0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1c8, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3ff, 0x7f, 0x40, 0x9}, {0x8, 0xba, 0x7f, 0xe5bf}, {0x0, 0x9, 0x1, 0x1}, {0x6, 0x3, 0x9, 0x4}, {0x4, 0x40, 0x5, 0x4}, {0x4e7, 0x3, 0x1, 0xf}]}}}]}}]}, 0x1c8}}, 0x0)

20:57:04 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 25)

20:57:04 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="00000000000000002e2f6669bb4b4302"])
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0xff, 0x9, 0x80, 0x0, 0x500, 0x23000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x3}, 0x1000, 0x103, 0xfed, 0x7, 0x5, 0x2, 0xf7fa, 0x0, 0x8d5b72a0, 0x0, 0x8001}, 0x0, 0xa, r1, 0xa)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
sendmsg(r2, &(0x7f0000000f40)={&(0x7f0000000340)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000007c0)="9463fe01282b57e717648e9469cd62c7643ac56beae87fb73c9993b2757b0020b91b8b3d1e008feaa70bf6beac", 0x2d}, {&(0x7f0000000800)="242cf2f8d9670d460d8603c8ba15b9b0ccfbe1aeb5b1bb1662a785dc14fd0656b6d380482188afddf141a0b53d2363b3435c76f0dc82c8a0a2f23e3cd54338ae8f5ccd8e440bed50f364542d70c878e931d28346aa1b18a4a9d3575ce53f5260e0f0f6a0146e5de71396337045e81b99cf9cd7996218ce04f09a08b8e5306aa240a053fb31f3bea02e432972c088c384a410d1827979454128a2c4a4d80a0a28dfa018c23e1920eea76edfbb543076792943e4a9b6bcbf671629aa57b1584bd3da5c0a700f6474527817f4b4cfd036e9", 0xd0}, {&(0x7f0000000900)="000896089a79e24533df2f2b21392d76a2980a100ed31da0669e2fb766347fd24a62dbd7cd86be6540d5f30169084f5cff3e28c271191a46b525bd18e07d53d992d5769520681ff8415668bf4b53462cb60a8d579c2be27e51782d388329ec076da293643ea996cf2bf1ad35de4a51bb56e1e34bb5a282e553ecc5534807424e986c68626e1b13af69e97c899f22cd30801340c8fb1f0c43c84b60bc84543318a7597dfdd315a6", 0xa7}, {&(0x7f00000009c0)="1d1fe4de47cb4009b2140f238b01cae62e8ee1fac684e7af828cbd0757d6ea0b65be5c6aaf669a5107ce509a947980dad20c9536b4ee007b9c97793b64177a6cb58c011d", 0x44}, {&(0x7f0000000a40)="f0dcd6e4635f70be67bae02aedf6c94d84fb1f010dc45bf75be5138aadce06a585bf9bb2a62e173d71c0f57ae83f1caae7fcf2a988d4b1739c19b34e66001fb3378115bc29f7a3a93ade2c7e99dea28f2b00c0", 0x53}, {&(0x7f0000000ac0)="6434b81dd54d055b9d1795ae39fb8cc864c905399553ae524855e262756e00ba76e81edaf49cbeee58f256224aa1d83d4944a7f2ceeff9d68fd95671cdf2c09841925dfe967774fa3b28007aae70f51edc697ea32c569a047ce632ce562aa2a5e958c552b67358d47b3a2f095aef14b65b7464a7d062405437a8c3d152b60162c8d70d1fdd1d3ec754c9f29cd37f225c8446b3844fef2fedf510b66aab7824f1f05fbf2c32ed862d55036ed984ab106ed55c62874f5c9ef4a2c76cbee0c77f6c1756efd25d20ca41f1fb41429c4d4436361b7f1e69b89a7e51801ecb00c3546bd3f0477ce8d51a00025ac308eb9a17", 0xef}, {&(0x7f0000000bc0)="a41292dd924a", 0x6}, {&(0x7f0000000c00)="f6e92be6d44f540185b107dba44fb2f3a0523829a0a43305ef07ea45ac5ca6ae9e48b2ddd1fb43f9305bcf8124f4e060f270488ca1201517d641281c9039bace2ef0d05f3d7d1f38a95bd63f56d5ce0118e2e70c064d664f75df14ca4d8d119e959a168fee6032d23eee7f9cc7ba8673", 0x70}, {&(0x7f0000000c80)="0d21f66185fdd5df6060421ece94480386e3e24c229a861bb4fcab198b0e87f538e7b5b49d6067e4608c60c131540bee93d1c56ec33c2371bd5f6e09517e65cb8568b93cbf7cb187209fd4af806bac9a5146af197a816b2da36934ab7980ce04528136fe847db457e74f28a07ecdffa3a41b2142803e7bd4670119a388ed1b9a57", 0x81}], 0x9, &(0x7f0000000e00)=[{0x38, 0x10f, 0x1ff, "ff2ee1fbbc3013afe5f69d9ab246db4c8a5792b60fe1af9ffda4f2d3ae13a260fc8497ff1918"}, {0x100, 0x10d, 0x5, "e1f50f6c04efab430e9dcfdbdd529bf81d3e14bc2ecb24a7293b43703ce3eb1ac802e6b7fd6427f5b5e1e501cec22a8ed7713a068324c3e470686522c0d79027dff3b7656c67919cd1e41d9ce8e9f86b3b8309153c799a93ceb852984119352040cf28893ef18a80f144d5018a5901488d797912b333d8dcde9bb4603bdfc5000d6f3b4411ef92bd753945a1d7a7a907706ec07f8e76ef095b9cda04b9da5ac050acbb14c14be4ac82da12f87dcc36d0661b58441d619af21f3c181a3d514d21002962d4c6d02eaac25d12cf0d3466408c482dabdaf541984cdf0c6f567b069295d48b44820b8cb1a488bd0a59930d"}], 0x138}, 0x44040)
process_vm_readv(0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000480)=""/122, 0x7a}, {&(0x7f0000000500)=""/255, 0xff}], 0x3, &(0x7f0000000780)=[{&(0x7f0000000640)=""/31, 0x1f}, {&(0x7f0000000680)=""/91, 0x5b}, {&(0x7f0000000700)=""/67, 0x43}], 0x3, 0x0)

20:57:04 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x361d, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:04 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2, 0x600, 0x0)

20:57:04 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1540.317254] loop4: detected capacity change from 0 to 4132
[ 1540.329748] EXT4-fs (loop4): inodes count not valid: 1568 vs 32
[ 1540.331863] loop2: detected capacity change from 0 to 4132
[ 1540.337937] loop4: detected capacity change from 0 to 4132
[ 1540.344872] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 1540.358699] loop1: detected capacity change from 0 to 4132
[ 1540.368288] FAULT_INJECTION: forcing a failure.
[ 1540.368288] name failslab, interval 1, probability 0, space 0, times 0
[ 1540.369548] CPU: 0 UID: 0 PID: 11350 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1540.369571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1540.369581] Call Trace:
[ 1540.369598]  <TASK>
[ 1540.369605]  dump_stack_lvl+0xfa/0x120
[ 1540.369638]  should_fail_ex+0x4d7/0x5e0
[ 1540.369661]  ? alloc_empty_file+0x58/0x1e0
[ 1540.369687]  should_failslab+0xc2/0x120
[ 1540.369711]  kmem_cache_alloc_noprof+0x80/0x710
[ 1540.369734]  ? alloc_empty_file+0x58/0x1e0
[ 1540.369758]  alloc_empty_file+0x58/0x1e0
[ 1540.369784]  path_openat+0xee/0x2d30
[ 1540.369812]  ? __pfx_path_openat+0x10/0x10
[ 1540.369833]  do_filp_open+0x1e8/0x450
[ 1540.369848]  ? __pfx_do_filp_open+0x10/0x10
[ 1540.369864]  ? __virt_addr_valid+0x2e8/0x5d0
[ 1540.369882]  ? find_held_lock+0x2b/0x80
[ 1540.369894]  ? alloc_fd+0x2c1/0x560
[ 1540.369910]  ? lock_release+0xc8/0x270
[ 1540.369927]  ? _raw_spin_unlock+0x1e/0x40
[ 1540.369942]  ? alloc_fd+0x2c1/0x560
[ 1540.369964]  do_sys_openat2+0x107/0x240
[ 1540.369976]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1540.369994]  __x64_sys_openat+0x142/0x200
[ 1540.370005]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1540.370023]  do_syscall_64+0xbf/0x420
[ 1540.370036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1540.370049] RIP: 0033:0x7f73dfce5a04
[ 1540.370059] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1540.370071] RSP: 002b:00007f73dd2a7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1540.370083] RAX: ffffffffffffffda RBX: 00007f73dfd7c970 RCX: 00007f73dfce5a04
[ 1540.370092] RDX: 0000000000000002 RSI: 00007f73dd2a8000 RDI: 00000000ffffff9c
[ 1540.370099] RBP: 00007f73dd2a8000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1540.370106] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1540.370113] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1540.370128]  </TASK>
[ 1540.371053] EXT4-fs (loop4): inodes count not valid: 1568 vs 32
[ 1540.378800] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1540.390431] EXT4-fs (loop1): group descriptors corrupted!
[ 1540.418485] loop1: detected capacity change from 0 to 4132
20:57:04 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2, 0x600, 0x0)

[ 1540.431846] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1540.432679] EXT4-fs (loop1): group descriptors corrupted!
20:57:04 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 26)

20:57:04 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000140))

20:57:04 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1540.498617] loop5: detected capacity change from 0 to 512
20:57:04 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x0, 0x0)

20:57:04 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}}, 0x44090)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)

[ 1540.522815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
20:57:04 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140))

[ 1540.566414] loop2: detected capacity change from 0 to 4132
20:57:04 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0x1, 0x36d, 0x100000001, 0x9, 0x1, 0x6})

20:57:04 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200700000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1540.575934] loop4: detected capacity change from 0 to 4132
[ 1540.582358] EXT4-fs (loop4): inodes count not valid: 1824 vs 32
[ 1540.594253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1540.599608] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 1540.614289] loop1: detected capacity change from 0 to 4132
20:57:04 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x0, 0x0)

20:57:04 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 27)

20:57:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200800000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1540.633433] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1540.634254] EXT4-fs (loop1): group descriptors corrupted!
[ 1540.652926] loop1: detected capacity change from 0 to 4132
[ 1540.676241] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1540.677887] EXT4-fs (loop1): group descriptors corrupted!
[ 1540.679418] FAULT_INJECTION: forcing a failure.
[ 1540.679418] name failslab, interval 1, probability 0, space 0, times 0
[ 1540.680473] CPU: 0 UID: 0 PID: 11384 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1540.680489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1540.680497] Call Trace:
[ 1540.680501]  <TASK>
[ 1540.680506]  dump_stack_lvl+0xfa/0x120
[ 1540.680532]  should_fail_ex+0x4d7/0x5e0
[ 1540.680548]  ? security_file_alloc+0x35/0x130
[ 1540.680565]  should_failslab+0xc2/0x120
[ 1540.680582]  kmem_cache_alloc_noprof+0x80/0x710
[ 1540.680595]  ? __create_object+0x59/0x80
[ 1540.680610]  ? security_file_alloc+0x35/0x130
[ 1540.680625]  security_file_alloc+0x35/0x130
[ 1540.680641]  init_file+0x95/0x4c0
[ 1540.680660]  alloc_empty_file+0x76/0x1e0
[ 1540.680679]  path_openat+0xee/0x2d30
[ 1540.680703]  ? __pfx_path_openat+0x10/0x10
[ 1540.680724]  do_filp_open+0x1e8/0x450
[ 1540.680739]  ? __pfx_do_filp_open+0x10/0x10
[ 1540.680755]  ? __virt_addr_valid+0x2e8/0x5d0
[ 1540.680774]  ? find_held_lock+0x2b/0x80
[ 1540.680786]  ? alloc_fd+0x2c1/0x560
[ 1540.680801]  ? lock_release+0xc8/0x270
[ 1540.680818]  ? _raw_spin_unlock+0x1e/0x40
[ 1540.680834]  ? alloc_fd+0x2c1/0x560
[ 1540.680853]  do_sys_openat2+0x107/0x240
[ 1540.680864]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1540.680882]  __x64_sys_openat+0x142/0x200
[ 1540.680893]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1540.680911]  do_syscall_64+0xbf/0x420
[ 1540.680924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1540.680937] RIP: 0033:0x7f73dfce5a04
[ 1540.680947] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1540.680959] RSP: 002b:00007f73dd2a7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1540.680975] RAX: ffffffffffffffda RBX: 00007f73dfd7c970 RCX: 00007f73dfce5a04
[ 1540.680983] RDX: 0000000000000002 RSI: 00007f73dd2a8000 RDI: 00000000ffffff9c
[ 1540.680991] RBP: 00007f73dd2a8000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1540.680998] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1540.681006] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1540.681020]  </TASK>
20:57:16 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:16 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:16 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200b00000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:16 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7fff)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
fchdir(r0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)

20:57:16 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140))

20:57:16 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r1=>r0, {0x100}}, '\x00'})
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x8, 0x6, 0x3, 0x80, 0x0, 0x8, 0x106, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xab, 0x0, @perf_config_ext={0x20, 0x1}, 0x25, 0x9, 0x8, 0x9, 0x7, 0x100, 0x101, 0x0, 0x80000001, 0x0, 0x3}, 0x0, 0x2, r1, 0x1)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)

20:57:16 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 28)

20:57:16 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x0, 0x0)

[ 1552.140792] loop2: detected capacity change from 0 to 4132
[ 1552.140825] loop4: detected capacity change from 0 to 4132
[ 1552.153835] loop1: detected capacity change from 0 to 4132
[ 1552.154392] loop5: detected capacity change from 0 to 512
[ 1552.167777] EXT4-fs (loop4): inodes count not valid: 2848 vs 32
[ 1552.177046] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1552.178546] EXT4-fs (loop1): group descriptors corrupted!
[ 1552.188797] loop4: detected capacity change from 0 to 4132
[ 1552.194643] EXT4-fs (loop4): inodes count not valid: 2848 vs 32
[ 1552.232376] loop1: detected capacity change from 0 to 4132
[ 1552.238487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1552.267114] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1552.268452] EXT4-fs (loop1): group descriptors corrupted!
20:57:16 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:16 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140))

20:57:16 executing program 3:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r0=>0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x10001}, r0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0', [{0x20, ')\xf3.k/\xe4,+%^'}, {0x20, '$\\-'}], 0xa, "a793b9034a2ae90a74ccd184580e73e6c05d97a3b8b2a62ee314f492062c3de55029fd285a1590604cd47a197f7a34d10d595c7025f8d9263e45eeb9fa812c6c518ed11822248f156b7f7566c653d318d88b673b653091a781da531a834970b10d9de1295ad33c815b0f885e6a25f93c6e4cd58bf88678006be006fb7edbc0c2d762a635d22846c6450f3268946f623a3ca48f561d0163120d6d882b0c8b34ea0242dc5f748928bdd4cf7c423dc5baa0f846e65befe6b698fdfdc8da6ab507cb1d5e3f159cb75a8eee7426e0785d82ca88ca93322e9e606be69de26ecc6de799d06f502d2b7fc5f9fa1b"}, 0x104)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x30a0)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)=0x8001)

20:57:16 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={<r3=>0x0}, &(0x7f0000000600)=0xc)
move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0xbc, 0xf2, 0x6, 0x0, 0x9, 0x100, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_config_ext={0x20, 0x1}, 0x40, 0x400, 0x1, 0x5, 0x9, 0x5c6, 0x1, 0x0, 0x2, 0x0, 0x8496}, r3, 0x9, r0, 0x9)

20:57:16 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="201800000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:16 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x1, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
write(r1, &(0x7f0000001300)="8e6c65504468249ccb646b3507c7be6a8e316a8feea7163ad90e40585be2f84a673191093b5bc377ad698ee099b49789945c3d1215816023f10cbe8f5c41bc6af7e694b660ec8c964293765a9fd4ac074cebb086dcda12e14d48081574b0d3e76cbbd05dbd6a655702ea960022cd6335029d210ed423fb26607b300b38d25b69b07fc524c07ed27bb1731c27466a4fbc775123617684ec416955d70feb69a042f88aa5549091f9a484f5dc97e0e0c8cb88b81cf7b345c5395f64a71fcb67973878", 0xc1)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
dup2(r0, 0xffffffffffffffff)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r3, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a00)='/sys/module/usblp', 0x2041, 0x61cba51197a32f9e)
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000001480)="594e638f76f897f04775d5e6edc81de16cc6b2c34cd71f5a916d9a23734a8478f6d998459e63376819d37ecea14c12b0f0b079ac1d86af847cb1c56c70c094d5d5f3192ad8976803d9fe2e295f76249a852f8434c7f3c7711ef70bffe5b084b864eb1b354127dd05acc9f89133e86f7625b74f10637a0033328b6530b962b32e08aa2364338faf9e38a464bc9fac07c8")
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r6, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000300)={{r6}, "0a5d8789db10dc027f64ab4fb63c1938fed12a4314afaa575fdebf0a1348c3a554dd5b7b9560af622c507306550bbd259053940b78ae6ab366cabe6c73227dcd0596142398c8df7700c53f9ebd6871113bc02c083251e43b71a61ce599fbae6a951057e1a9cc3e91dda18cae65c39468186143af99422aaf87fb3c4711e499210cc1917e732346672bfa85feaa2c7c505df4bd6a2a713ef248ab802b4933ae821bfff30b1c87d6e60a3a75bfdd4e79df8063ba4b595245716dacf7bb3c0fcc71587c406aceed99e69404e962f7367e449f0c677e02953e37cc85a37047f9405469db023136488b302cfad1fb6b5bc0098d0f05cbb53b4e892c288c21af34b3b10fb9c28a69f0e413076acfc96806b11b3598913001278a442fcd28b77f30f90565eed4aef587c859885783d04f4fc59840c3baeedf8384c788d7d7d646f9424f4c0ec72426307329780d5401f11a515bf6acd884ccd2c9820664b9c11244ea729d2a936c3d65cd61ad6cc29aec9ae4e39eb51079a50ee298d6575a6458bd344c4a13feefdbb4f70d55d7c9ab77c099900af691620c3c56589aab941763ce7ddc391c0cf6ccc751dd50fab3d646f16df87d834ebbe3d2d2977c26bdfd52cd49d30b486c0eaad7a965ae0e92092b47554dc1e265a29064efdf2658666a005b58299b299cab6c82ff96bf0dbd9796526c595f67a7437873545a26604a9a014e81fd20c465e0a85604441ecbfabd3f965fdd4acea09228db06e056bd3eab96a95f99cbc7dcb912b11a2e10b1ffb893185cc79726699d650040a603e54911ffbb3c61f076b7a0ce1b2dc027eb315753b8e3a05abae5f869d7914a802e6869b0a1b15bb87e36b495a8d548e6b1b46ffe2c7ce943c86ea81ce7bd2d3f6c77d6e3af4038c1f930a6d954700ee84a5db06f15e2c49fdf1f769e46675ed814433ccdf48e9e261f192a2aecb3561dd94a5180d4dfb89d65253f47b003c3846de04dd2f55c0209d464f7882263af3809d422c1e73562344ff80650d4873160ea55a3eec468620e5260d9c5d7cc1bdaac5710967cacb61d5893c61caa7447423f3907cb44d488585373c3ca4f595f949c1f28e97a2e0260db10be32eec772f0168637cd0c08b75a8a396f80c2c19be4402035e115eeffa63345df4e50e8e6b3b32247b2d36cc5a29a57a0e5f1316da1d5e0b46dbfc5c971f5426cdb1ca55ae9b30de08b0769f2591c444ee94dea99b550f7d16f61bde6f44aae37db20ed04160e6933a0f731e2d81776642fe4414584c23cc625a84780fb7be8102a5e1bf9e6c020a4aab2652ed2660446a7116fe06b2c1635571f4f844bffa3e5fdf46eb9bbd69b5d966a467ce330d262a51512b0304707cce8b7d9fab7194e09066bba3a06936d2ddff5338075333ed4ba48e2dd082996cd6488547358a0b56d151c2f66c76ec4bbde1359e5d22a4e5f8e6e88c542f51680f9383d510ca70e56969ce7d585519a72f6334e3a4bcde9ba96dc5375808320b27e235ac999bf2ccad36fa1e8f34bab2091393e892842deb1624de7a7f4714ab8991e2dcc2c49ddd0133a4b58cdec6fe203efbde68dd6d5ebc2e061c425e4714c77ebe4b3c1faaf6d2af02e4157f3fb8e7bcffb89aed103c0e9f54efeb615c7fc4cfdbec90842b5dc64708a442acdd43c82610938f7b31bb62b581f42e41718735c8d52c0e8b85f6d1d395cf00ed496c7d7097b080381b3398ed23d546b6f46998913548a4551d9ee4a6342511ca71deb7b28f09af4e8c0285e7779a3846343dd43c2bad36095aadc1a22a6baf24b6663c1f2277b9272cae059c8724c3f12c0448fbdccf64af86a961091320c332243e976553a4626709f9778fa4b1fdf5a745c592c95828943d43a8f1d0db360d6260f76e785681bfa98f2a19f8b7c944b5b419d3def5ce1bb09fb5cd79529e72e7815fd6ea7851f9f0da8206c99e0f5ec14595d32f11ec29d9408d98a5252daac1b3f597fa23e3efb692f30ec8b13817729dda469cfa1bcf3b05211d1dc02b1d85c79d0b8c2616460e29bcd96dd2c1a0b8242fc482a7b2d3a1ff7d3d1b209f6f1f8a47ac680abdd2d0749bb08d2114106a6062994ef6f52b2b98f597cd75363d5a3e791baf52ca2bbb509d28ba8c614596e4393c3a9ec16dcf8eb867a706063a508ed8fa8f18d3964db51ee8a0212e70880bd821177727a3658c7d4c7822e23da6f57afd63aaf271d5a0fab224262533aef2ca14f50f260747aa502333452b34c8754528dac0bb6c7178f8271fa15dcf6a38b97cb5bdd09d067ad0ed10553eb59073a55f622c287301b9769e49dd81ffdae714d3abfb32c2ef6a44407421f31905f0a8cab6c3cecab582be52cffd2d5fa5e9a62b3493cfd6ac53d9fd1d47f5e2d97ba16e3f3f7e49ba513a0f979d073fc91f697fe85efab4230f5d519efab188aed8531b92eb8510325e2d73495d8ed683e6f8f5f7942a68d9b3239e9492a053c9521d5241e9e405672a284a87a8d692bd2efe44f84fe6e57981a795dd0d394e896f0a49dfba19f32922443a6bd55777b19647be169da4699d2f98a4a7a11e77ecf58c6fd1a7af42e6fe69a111cee9e6a73f86a03617f01000ca473ed745e0971266b5491ea44da209cd91d7cd6b9b5f729ca160d600ca060a432b1292cec61425a657dbf47ed50d3b0c076811d4465ab9d97f722ec6dbaf1c72c299cf0d0fa63e724c78881e623cbc66f9e90272279a6edb836212ef580c0e6e749f2df60a8fc09d582e81c6437955d67dc2b4e69cbba6f34f8063fd5b3ed9601ea352261feec128e643f83a48fb9ea51626ff9e4982ce34ab823d8f156e60cfe6d2986708409a798ef329db83d10bdcb1ec4fdcba12e19398ba4c6da91f1a8847461aa2c66c5a4a3a8a7b1e85e50f366b1578aeade162b9238cf1829dbbf2a65f5f5afb4476f1f932afc8d46084ee28d025d5cbb188d84f8edb66d6c2caebec963726480c4415204b35f30033bb709df301bb488b878b4b92efe7e0121d20c23538edc3a5ebde4b873089b9a717cb193bcb43c14f5e200dd76f532c223a89b8588f9af411fd5034d6d32d2148b1501724f6bfe440bea8f8874187ae15a9e71c8a2d3e2db6e00fa3f46e32ce4bd984f69584308bc574b87a1a1ddc625359e436b38e27e39c2d2f4c42b1bc9c606ce8500e5870d425fad5e60c924f2b0d3855d2e58a58e2b75f73770f62460c49dae11f12b6cfc5c6ae2a30a4c396e9b23034d5c9df3435cf939e9301c7e9cab763704487dee321e28f7bc3ca12e965c2a8f46c87fa003a274cb9c5c4c6787692c00a201998bcd9d1c86dfaff3a43e33d3a3801c774c8761f8aeae5a1d0b54adc39f514271dd00cdab97313654375e9f5bd3d1833d00ee48714e6859562a9f1d33b3f74fc911e354b57722609adce2e23443753cde36c62392c43ac7db907026f0938f3696a5e84eac92cd6d50ceb1d31497b97460c3ca08b63155e41a5f5d5402f7778f45788c98d298cb114da6f0cd4461ca019284306affb1b10560e8cb16f9e65fbaed5626e4e56069ece7188984b8cdfbae9cd65708a546d226e84b0a167c99f4fcbf80c707d262b06e922419e08483955ae40bcda55874b826f2689ea531806b2988eb5d0e16686ee1375c544f980c39ee7e9f50310b3b85207b25d2251514e0a93879859bce581654802459de5038ff0f2b20fb52a6c41ecfe1905c7c44906e9fe07418299012e73affe4e5e69e6c23c6a41c096693503bdadd0520bcf04e3982dbc7eacd5f9ce0a1296e537add5e19ec4579c62bc4d50b4d5c2723ea3016d078993af2dfb016bd277e48fd9dd5ae5cf2a8fb25ad90fe9781cd81d2ec8a1e76e990154c82806bea84e398607e270e1bcb1d22b2ea56b6513e19e8416149f5f587b6cf99254c008e27fa93aaeebe946be8b39c9846b9e8add61eb92c1499b9404a1a9b1b62f235cf473e632c65b4ee6296cfa15b3608cca2f651bf08d679d4ecee9eedc724f1e0165903b98ed34474eba30c06241fe10a2d99fc01235a1e1e0d1e758ce2afde699b4f446dd5a6ab7343394ec6a5fa9206c80c79e0e8f68c612a2a7c287c66354acf6b084f2b7f8091ed0c9224d01162794304b99b8f5c1ea2b5a0b4d63a325d4f8cdd0874624a4c3617b823de695f99fcf92d09b1d8807b7f5fb3771316e2b1a485fef19b5bf68eb03248c4219cea8d5f70da32d3f5c13c26f1cecfa8c8d144c135ecb82b202dc05ca2b4ea7f5dbed1e9c541ae82b694321e5ee5dc017668627817eb1afcca75a4bf32d3be7df22bea87c869b86bb99a824ecb028d9cea44d98755fea5cf8d41ac532ea10ee4a3d1934819e9a69bb82f5d2b7da70f5c392dced3ddef9d418c4c3844d67f73cf57c7d5a2e67741cfcf88baa32ed8fa33eb09804af614b18686db2719cca9f5cd9588f6b08f849a4f84523f9f7002b915ce775c42745a3092c16d7921bc0e3549cdd5daed70c2d4a7f55d00ebbb75f7ef33e679d05b7a610deb2768579133400407456de3700802db99785f2ce04f32a87a38b7af507951628f28b97a8f8bd37265bda7d073668f4e179f87fc5013bcdc4a2dfc759970bf18ba942d60ec95ead90f5c21809c12f2d9e8107cf9de7e7bd54cbd5ab28beeb002fd93f24b0ba45ea32c3b3e6ec573133de6fb8c7537cc0eb05ca341a7ae47b1b6088f49de4073fdb3497a427008237f78bc175f233dbeb65a67243c7eccfc81071ae03e78f69ac9c24790e42011f7d8dfa2d6422dcb8c4e0cf5a3c764c9e00aebbe8e1d268be2759279a4f12d2114cede9a1f956863e744103088bdc5f8cee7c7b43840a13640a4154bd643fe39c51a38693b42650f5bfbfd6ebeb5f146747b627b39d1ec8fc77c1c0f14f1a66a587c84670945757606c023b4e5af0833b476d88144eba3662e16d7a20c3e80bbc95a3a581b8ae3a40bb350d99a07763b7cb6bbce97317508e2388dedaca63f79530b4e74d836e201a16c240b6dabae5da5875424354793b2015de434e5b954df949f8983781352fe83b77586dedfc36cb70e6f3475acbfbefcedaa9be902b282e11aa67744b53bac101cc5848d3c785dc04fa0a57c7302d7273d1418390d01c07b7f379c4cff9c5dd39b402ba908fb0b2cf3a355479574018a094037df2b8fcd824cc48640dce828197e60d7522b472bc7e45b1f4673c30971cce8e1c3d0d7ae9e6aa0f61163bd48459cde421aa921eed706a685a27f18e5832a52c444609b6987434aea35dd00c489fa6825905ee8bb1bde02608f23121f6bd456abaa963f8dce04fa2ac1e45ba62044e44efe4fb2dbec5c1ba8d13d47f1da558025b48878380f24ab18ce82eceb00d26b74677d02bada60f676dd30c71542a6736a78511bb6608120cc836227e3e4aad71cec940acd31f72fb13cf2a3ded1f61d322dae5329fb06260fbc71fcd37ad938d7985e9c2341fad53ba4a5a1d197e92b22a60ed98a4f9a37b12176528152fc89d173eb98f0707d7ccb8f970a40bc76c87c6918ce6e1f6ada9ee1bdcd400f3a65e47987d9d67f385453d01f1c5b25ccc7db1ac2346aab3fa0727f69b081bfcc340d1e429dd430a68480358a5a571208e36e263abb18c7b6a97cc7d04ba5338f20f68ba82a7c737301d9085c69e33a1c730d17bd80fd89fa7822f5f787fa647c04de69708e0d7495b8326b621a9b4b358fbb92fd8977f525c656eb374da3edd7c43edba5ceecb4729fe5eaba12b3671ce280660de75a375fc800bb53a6ced6665a591a8184d02c390365b827c856f9bc4ce45a"})
preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)

[ 1552.376568] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:57:16 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:57:16 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4300, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1552.409141] loop4: detected capacity change from 0 to 4132
[ 1552.447957] loop1: detected capacity change from 0 to 4132
[ 1552.457206] EXT4-fs (loop4): inodes count not valid: 6176 vs 32
[ 1552.459398] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1552.460492] EXT4-fs (loop1): group descriptors corrupted!
[ 1552.469543] loop1: detected capacity change from 0 to 4132
[ 1552.473587] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1552.474722] EXT4-fs (loop1): group descriptors corrupted!
[ 1552.486200] loop4: detected capacity change from 0 to 4132
[ 1552.492783] EXT4-fs (loop4): inodes count not valid: 6176 vs 32
20:57:25 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 29)

20:57:25 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:25 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="201c00000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:25 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000001480)=""/4096, 0x1000)
getdents(r1, 0x0, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x7f, 0x20, 0x2, 0x0, 0x5, 0x80b05, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff9, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x1404, 0x4, 0x4, 0x7, 0x1, 0x6e9e41cc, 0x8001, 0x0, 0xfffffffa, 0x0, 0xe2d}, 0x0, 0x10, r2, 0x1)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r4 = syz_open_procfs$userns(0x0, &(0x7f0000000380))
r5 = open(&(0x7f00000003c0)='./file0\x00', 0x100000, 0x64)
dup2(r4, r5)
r6 = inotify_init()
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r7, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000063c0)={{0x1, 0x1, 0x18, <r8=>r0, {0x6}}, './file0\x00'})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000008600)=0xc)
syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6d706f6c3d696e7465036c656176653d72676c61746976653a302c6769643d", @ANYRESHEX=r9, @ANYBLOB=',\x00'])
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000000440)={0x1018, 0x3a, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x6e, 0x0, 0x0, @fd}, @generic="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"]}, 0x1018}, {&(0x7f0000002600)={0x1428, 0x2e, 0x0, 0x70bd29, 0x25dfdbfd, "", [@generic="fa99de12b445a6f74ddb09a6a0b4ce851db349adfe72d96d31fca4b07690b83205698da83c0be703b7c15cf35bde4a87221bba4e24bac40471db3a1f470c65da9256c39706f737b552e5660fc7f0498ca6fd093d7033b22ba015e7d9ef60", @typed={0x8, 0x3f, 0x0, 0x0, @fd=r0}, @generic="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", @typed={0x8, 0x67, 0x0, 0x0, @fd}, @nested={0xe0, 0x8d, 0x0, 0x1, [@typed={0xc, 0x54, 0x0, 0x0, @u64=0x6}, @generic="22eaea6cbffcea380acb1ed87ff0e1974dafa7088169d6a0e9735c3669fe10ede11a03bc7198359aaf1ec4c4e6f20a16d8f8bd7cdc6075fdebc3e8e2e945d32408e5011fca07a1d07c27b3a280ee5bb5012ea6cd69b39c08fc16af1f6ddf797ad14576032956eef272", @typed={0x8, 0x5b, 0x0, 0x0, @u32=0xffffffa8}, @generic="ace887d95528cb449aa0374587eb62d89718d58e0b964727eac1843534db1ccae132b0df9ac5b14b1464e2c92a7fcf03bfca6890228f4ff721cbd6e24ddb62801feb506ee8d0315996ad1fc39ba4ebc9f075a4f1b530552d105c76be1fd6b3"]}, @nested={0x1e3, 0xe, 0x0, 0x1, [@generic="364896a025081f9034e27131ff4a43282ed0e4a3ddb9e0f4261cea50229ea6227c68b5728a5c56a0fc5e392ff1468e93f2d68850828f3cea7ef6a4649290cb8fc8c193a92038df48da1a73d0fb2d71e7a0b18afb1b94ac7a09ac9f775e21c923", @typed={0x13, 0x2, 0x0, 0x0, @str='/proc/slabinfo\x00'}, @typed={0x8, 0x36, 0x0, 0x0, @fd}, @typed={0x8, 0x1f, 0x0, 0x0, @uid}, @generic="c58418dc63163209812d132fd7fc1f7dc2866c6d3157a914daa660868d851a9941dc4f4b194311178bd9e8b74fa347c0d85e59f7670dd759856ca6e8009db1acd3309b3e86be13083c754807ed7ef728076858ef105e19a9b0238fe42d08bf2ebbcf91a88d7597bb3d142d1ba52ced9307d84c6d71b37548e0d841403da2e9ee03e557b5", @generic="4642097eb6f19762c4615058e1df320c95116837f8e19431ca3e76b5ce9d3a01d306293ebee393325b3f51518a77ed147160dc5bd3fa37773346eca5adb89aaf74b70ca38bb6402fe52ee832819a28cda9c6e6b6d7dce0446538704fbe71589904cb2de8193405a09e4b813d4950f0cc1179ceb72367dc10cc16ba187026f3a1cfb8599ae6829c989586f32ae54516b23b0597dd339db775994e07fd6f9687469b862c8c36863bba86aeb202d8587252d68dbe91037e651ba66dc0e6334c8fd81cf426a3eb6feb008a43eb05294a1d053bf3fdfa7d3cc8"]}, @nested={0xe3, 0xe, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @pid}, @generic="e4cede8df704dce28db2df798a486aa54705569e7f3cd6c74a55b6f2f963ba79c8af57bb523804bcf56812d416dad7bdca36b5785a3e0826bb612b24f42e4458e23b", @generic="7d72a05af49cfb5f2f0a0f3aacd2f13b95d245d421bcb639b510d6134ba06a4b4968a76f0d26cc196ff750a174", @typed={0x8, 0x4b, 0x0, 0x0, @u32=0x7fffffff}, @typed={0x8, 0x21, 0x0, 0x0, @fd}, @typed={0x55, 0x5d, 0x0, 0x0, @binary="bdb37ee2e31a07b89b0591c823626379e4b6f55323f78aea63cfbe908d3f0f76415e77674119a1a1bd4f6e8c351698720afa171fac7deeafa8b9331e3c64c52e9cb18f843dc8842163fb787627d8f85a53"}]}]}, 0x1428}, {&(0x7f0000003a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080094008192000087e34e6e905b609ef4c1bb9bf14d55bbbe42ea409a2792d46f851173dd4789c1d66890e98af671f68cab00129764bc2666d4e84a89061809a13fee381ef379355f7b2b8450bb08c9efdd83f30bbb1018afa88a854489f9d30d9487a018646aa94791c2f869431508b8cd97e18c988c27c6c1d9f71c90c7da31dae71366d2771a9624e0686d0d155555e2a24d96b41ba5aa8c384876d58e9deabc09007d0070726f6300000000000000"], 0x230}, {&(0x7f00000064c0)={0x160c, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@nested={0xb4, 0x76, 0x0, 0x1, [@typed={0x13, 0x73, 0x0, 0x0, @str='/proc/slabinfo\x00'}, @generic="c67d6bc69b6b5e40714343eca97a636b541280b264f26a5f2a3cb76639a24b49e9d584ff7c28bebe0ec6b4fb686d80cb1d5b5851acad456ab09809767cac1111ab8132c6da56f02c03624f52f4307dcc9bdaec2ab8f234307f0028656fc43c56ec501f7ee0860f4803f3822e", @typed={0xc, 0x74, 0x0, 0x0, @str='ns/user\x00'}, @generic="7b5c6af042499e459101ede48215ad69b6f4b464726a92d0b83f754d2dec8d05f44b18cc"]}, @typed={0xc, 0x69, 0x0, 0x0, @u64=0x1ff}, @generic="de9b755e61b7ca366f372ae1fee5bf0c55f1b232c0c1e52bc6c9d97bc034953d7eaabadc089e39fc203de85d4b3e8d218cd4240e30c86353a0ce19c58fafd353dcc3dcf27d85d5261ec330004a7f16de062284", @nested={0x146, 0x83, 0x0, 0x1, [@generic="767bfa9c01eff761300834bd7093769485300857a2fe6114da07b2bce2a79859089841ee4d80aba3dd321cfc29830dfbc7a6858b071274da71b2fbe485228c73f2b3c556ed5abb8ae1fbacccbc381974f69122265b7421245beabf196ced01b9780f1d008ca5cbea885046e9c76bc093a2b589a65864d8cb530a792c9d859bfb27d3370fcff5a5cb1d58c7d6b7a2dbc639941ef58d7c436ecd8d260fdef8275ec2aa43b321c52aa7b255e36ed82cfc3b6d372c0905bac156bff72ad31b2e53a17e4f40314d5a539554b0d83db7c249f56bff2933236cf2282f6e17ca935e5dd5f2ddb23af9f77b52696b", @generic="b3c7cec7cc1123581e02d5902fe8b20d843d8bd1ef1ed12c65e5f8ee20f0631e5972584fe124412dc4e761a54611ed8a0774032d1158ce187cf67da4a1e1e396cabbff2b80b2d8132ee819b0f28872dfccd0a4b0e24c2f18"]}, @generic="e53216d3b70868dbfbbab07f20c75e182189e4f73274624946a03afffe3c333ec08d79feb08edff9e72c4738bf51508d4f34db54f5c6b90402a71feadc1c47608f7f5b700bafd21b948b4fdbc73fd8", @nested={0x119, 0x87, 0x0, 0x1, [@generic="3c4c2fde6cd3088327130611b5155bff896b65704b6551a0ae35bed992b2", @typed={0x8, 0x91, 0x0, 0x0, @uid}, @generic="e64c1a359908b9d94934e70d5a8817f5337c6d46e239", @generic="dc598e78e3c430c1c0371683514fb24eaae9033ebdafefa12fb784dab0600973df3b64f575866833543059674cb46ec35fbc93c503f152a28be28a4dc56103c70d49d5737576ba74be2f46777ef07ef7acfdce80695d2355b7565198a74d49fe5462422fa10fbb75560a", @typed={0x8, 0x14, 0x0, 0x0, @fd}, @typed={0x8, 0x59, 0x0, 0x0, @uid}, @generic="feae38e7935fb841ad6eb7132b8cf82c5051217fc24d024eea98657d0b6197822e2402a7db7bd940609503ef5a2e98731b81c0a305becd7d0f6f3478f1b3ee", @typed={0x8, 0x93, 0x0, 0x0, @fd}, @generic="37e33c7af0b54352811dc05fa48adc92836365740b687e30"]}, @nested={0x1231, 0x82, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@multicast1}, @generic="10d097beebcad2ac0a6e00ab1ed74bb9a193b6cfa847feab5b1d7b199b89ae03408d4671aa455dd6d9967ffbf6cb9620bd214de83d00e3249062ac25b3ed9ef4f4f7d1a5651dab1e5c1609b86917dedc7f068b65a7fe5e1e7946ec73211f9faa204b3d8cf87402229f766490bb58698ebc64c3c80ec80336de5db203e82d6d791408f5698c16c2d4a793091a32d1470a8e83406f7e87ff942606decb63c8282941222c2d9ebda3293ffbc4de0f6b0f4a6103c18c30f0447ab6ec2bed41e4f7662657da", @generic="93028b8fdde687217ad3c5ae831424af920fb90c28d5aa78dd96a95ace23c9a5242730d497e23e6dd6ab4b842e659a2be7d3745db5efa56c7a4d44df0cbe69d47fbba4755bb6222ca43019bece2ab834b82e0d203ddc805c6a333897c0a5dce57ba801151c7f9403624f45fb9631cdb0000164f98bbae6e07ea335578f251792ada4958a3af853b6a993ff4fdfc0a0aca91f7b83ed381c9ed2457a27507289cbc85f8ec268248675ada753c6398217d6b96437bb91a632f4c8c903209ad2607bbab7c32a72a41691a96b718c3050ea006e672d94fa73309811b63e0d96809016d9bcb77bc8147db617c1", @typed={0xc, 0x93, 0x0, 0x0, @str='ns/user\x00'}, @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@broadcast}, @generic="b748d69ca836397d9bf00ce8471ea4a9f7c8565f8ffeeff2a4bcfb830342ecf8176afdd4e197233397654d88962c390ddf4fb4f52bdb4814ea90b8a94994aad8f19036ab3d771e73", @typed={0x8, 0x46, 0x0, 0x0, @ipv4=@multicast2}, @generic="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", @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x77, 0x0, 0x0, @fd}]}]}, 0x160c}, {&(0x7f0000005280)={0x1080, 0x16, 0x4, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x3e, 0x0, 0x0, @fd}, @generic="bb2ac2ce4f33e9afd2f2553c78a4aa9a75a197125e8243648fc2fa4fdd092aa6628eed83067c3d556e276dcf4fdac416ba8222d17cc720325b3583eed8b104bfb7eb5b9521e70996ab8261930943e8e2e95cf9d0f17242849af1285f189c90030fecde1e0f2aff", @generic="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"]}, 0x1080}], 0x5, &(0x7f0000006400)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r9}}}], 0x80, 0x4000000}, 0x8010)

20:57:25 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:57:25 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x7ff)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)

20:57:25 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:25 executing program 3:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {<r2=>0xee00, 0xee00}}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}}, &(0x7f00000001c0)=0xe8)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r4, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)=<r5=>0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000800)=<r6=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {<r7=>0xee01, 0xee01}}, './file0\x00'})
sendmsg$netlink(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000200)={0x2a8, 0x3d, 0x100, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x19, 0x0, 0x0, @uid=r2}, @nested={0x156, 0x79, 0x0, 0x1, [@typed={0xc9, 0x74, 0x0, 0x0, @binary="0f1566992c651931a01276b42593012dd8a8f06494fdb67c1da86bfebc007f57c5c213877201a2ad06dfb85e55a8afb737c8dee2893f26c13932b20fcc0d44a07cc3b0cb38b321c454cf9d8c9c1ddf5a42c814697acf89de4d19cfe8bbfbd84aff821bb226a641aadb97b5cd8626413d110d4e0c7cf0f9f0e611649610b45759bbfb61ee5e8a0f3e9cb8bf39e0c815def76b677db9be14f7da9474cbe8b9458b9e0a2198e1a583427057c12fea3b9e0f5bcfe308bdbf6b0624a64445145ab4ea2fc6835484"}, @generic="73ec9c4bc6aa0db1d467e8d31f1ecd30d37c37b9fe41d19f187d5eee70b1f9dcb866f9da7e0e747889e9e2567a", @generic="abdc67ac9c07d4344fb5633e93a56c862f6aba9bbb98b6cb9ba5f7298114a33e2fcd26ad4cd9ad80fad21e723c", @generic="e52d317665ff811063e3b5379b79d12c0d65b45db17ffdb74cdd224e82e87d30269c643d6a20b239", @typed={0x4, 0x2b}]}, @nested={0x12f, 0x8, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @fd=r0}, @typed={0x13, 0x7, 0x0, 0x0, @str='/proc/slabinfo\x00'}, @typed={0x8, 0x3, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x49, 0x0, 0x0, @u64=0xffff}, @generic="714f49c2e431c4bbe20a62b58749fe8956d57abe17705d689cac8dd12a368edd7be77dcbfad3a18c74532a2aa569e5f27ccf68fad5f32e03ca354374a8edf9fc5f7d76876b977a78935bdde208c64b3ce131015785a39c72153c0523a2b9101c1975d0e3cde39d18f5441213258fd7ca892f5c5eb39fcfb5f0458f2db8aaf43087e3eb06c396e1297634072c34f86d32052e0be206d8d6944f669b80219939fb2a4d7f874b665162b6ad98af3a79da8fa44e97bfc9144bbf62963ca006d1ca390dda46fb97843c46eaf168393390e4d3bc5b09", @typed={0x13, 0x52, 0x0, 0x0, @str='/proc/slabinfo\x00'}, @typed={0x13, 0x28, 0x0, 0x0, @str='/proc/slabinfo\x00'}]}, @generic="39c1e277ac"]}, 0x2a8}, {&(0x7f00000004c0)={0xd8, 0x1c, 0x10, 0x70bd25, 0x25dfdbff, "", [@generic="4b97fd56e311d1dbad75fa6da638654c0b0afea4bb7253e448b491b5844ee79ef68e232a7d1ad98a93b799b2463a8d05a49228970cbb4c5a8f2956e57eb70221281c20002610f885ab092ff6472c9232968f565be3c48382b835cc7138141142e6a2c790c9ca01fc7730febe25a23e6ce51fa4cfae95586390ac7937a492bb35d8105f19cf0d023f32bc3b1528f5d221b08c53d4b7c3034a22f05d7be3ca50d6df089f88dc7dfb18ba9c33bdfb2f4064863303409e0c5c565e7b3a74e163c29447984442853c"]}, 0xd8}, {&(0x7f0000000900)=ANY=[@ANYBLOB="9c0100003300200028bd7000ffdbdf25103cb87fcdf6eb8d758b8c9fdba4a7fcc239a8777e986c354a04dcb38767fc636012d541c578bfecc786ccc9a2b17c8ac048b419c2aebe3b1b749be0d66a3caa1af79726136038032c75ffbb92e8fd1e70472454169f4dde6ea8669ae7557d308b54e439f0e16d896a26a677d5a0cf0ff50971cba3d4febc682514005d00fc01000000000000000000000000000108002900", @ANYRES32=r4, @ANYBLOB="08001c15d55500", @ANYRES32=r5, @ANYBLOB="c3e6fca66dff8a61a3039a427cfa76efd3728b406bcc7d55f1afb424393dfb1e2c053a3e0666a0b4a831a71977edfc4d85fe868b4ead0c08e861a89c381370a8497877f734bc9e4db186314d4ebc9dde79d62c21c84b2f0763f334f696fd1804230c541af7b5c751a181cf1cb16a1eb9110a5e6e9d8df944633022bd85763dc63972a7a1dc3e13cf3fb91b53cb6f7934b9e3194a12861b483efd2bb8b0c7eb8a242b4a526deeffa7e92641695cf454c1c46243cda12fd31e8e72a82185ecedfe740e7bf062d324eaeec8d44c103bc53fa961d618b042b2965ff4b3c4406d86e3d5bffc1acacfdce3989a0704bd16"], 0x19c}], 0x3, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, 0xffffffffffffffff}}}], 0x20, 0x800}, 0x40000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)

[ 1561.795397] loop4: detected capacity change from 0 to 4132
[ 1561.807766] EXT4-fs (loop4): inodes count not valid: 7200 vs 32
[ 1561.815933] loop4: detected capacity change from 0 to 4132
[ 1561.825153] EXT4-fs (loop4): inodes count not valid: 7200 vs 32
20:57:25 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:57:25 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)

20:57:25 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x82)
pidfd_getfd(r1, r2, 0x0)

[ 1561.893625] loop1: detected capacity change from 0 to 4132
[ 1561.896307] loop2: detected capacity change from 0 to 4132
20:57:26 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="206400000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1561.918204] FAULT_INJECTION: forcing a failure.
[ 1561.918204] name failslab, interval 1, probability 0, space 0, times 0
[ 1561.920298] CPU: 0 UID: 0 PID: 11457 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1561.920333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1561.920348] Call Trace:
[ 1561.920356]  <TASK>
[ 1561.920366]  dump_stack_lvl+0xfa/0x120
[ 1561.920413]  should_fail_ex+0x4d7/0x5e0
[ 1561.920445]  ? __kernfs_new_node+0xd3/0x930
[ 1561.920477]  should_failslab+0xc2/0x120
[ 1561.920511]  kmem_cache_alloc_noprof+0x80/0x710
[ 1561.920537]  ? __pfx_avc_has_perm+0x10/0x10
[ 1561.920577]  ? __kernfs_new_node+0xd3/0x930
[ 1561.920600]  __kernfs_new_node+0xd3/0x930
[ 1561.920639]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1561.920669]  ? lock_acquire+0x15e/0x2d0
[ 1561.920701]  ? kernfs_root+0x23/0x2a0
[ 1561.920731]  ? find_held_lock+0x2b/0x80
[ 1561.920754]  ? kernfs_root+0xee/0x2a0
[ 1561.920778]  ? lock_release+0xc8/0x270
[ 1561.920806]  ? lock_is_held_type+0x9e/0x120
[ 1561.920847]  kernfs_new_node+0x13c/0x1e0
[ 1561.920881]  kernfs_create_dir_ns+0x4d/0x1a0
[ 1561.920914]  internal_create_group+0x440/0xeb0
[ 1561.920941]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1561.920996]  ? __pfx_internal_create_group+0x10/0x10
[ 1561.921022]  ? blk_validate_limits+0xc27/0x15c0
[ 1561.921062]  ? lock_is_held_type+0x9e/0x120
[ 1561.921101]  loop_configure+0xc46/0x15a0
[ 1561.921161]  ? __pfx_loop_configure+0x10/0x10
[ 1561.921213]  ? avc_has_extended_perms+0x107/0xf20
[ 1561.921247]  ? find_held_lock+0x2b/0x80
[ 1561.921268]  ? avc_has_extended_perms+0x23b/0xf20
[ 1561.921303]  ? lock_release+0xc8/0x270
[ 1561.921336]  lo_ioctl+0x66d/0x1ca0
[ 1561.921382]  ? __pfx_lo_ioctl+0x10/0x10
[ 1561.921420]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1561.921470]  ? lock_acquire+0x15e/0x2d0
[ 1561.921501]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1561.921529]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1561.921566]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1561.921598]  ? lock_release+0xc8/0x270
[ 1561.921632]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1561.921717]  ? check_irq_usage+0x210/0xb40
[ 1561.921746]  ? __fget_files+0x34/0x3b0
[ 1561.921777]  ? find_held_lock+0x2b/0x80
[ 1561.921800]  ? __fget_files+0x203/0x3b0
[ 1561.921831]  ? __pfx_lo_ioctl+0x10/0x10
[ 1561.921866]  blkdev_ioctl+0x365/0x6d0
[ 1561.921904]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1561.921940]  ? selinux_file_ioctl+0xb9/0x280
[ 1561.921971]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1561.922009]  __x64_sys_ioctl+0x18f/0x210
[ 1561.922037]  do_syscall_64+0xbf/0x420
[ 1561.922063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1561.922088] RIP: 0033:0x7f73dfd328d7
[ 1561.922107] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1561.922131] RSP: 002b:00007f73dd2a7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1561.922154] RAX: ffffffffffffffda RBX: 00007f73dfd7c970 RCX: 00007f73dfd328d7
[ 1561.922171] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1561.922186] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1561.922201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1561.922215] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1561.922246]  </TASK>
[ 1561.929304] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1561.929862] loop5: detected capacity change from 0 to 512
[ 1561.930263] EXT4-fs (loop1): group descriptors corrupted!
[ 1561.950364] loop4: detected capacity change from 0 to 4132
[ 1561.957604] EXT4-fs (loop4): inodes count not valid: 25632 vs 32
[ 1561.982831] tmpfs: Bad value for 'mpol'
[ 1562.019474] loop4: detected capacity change from 0 to 4132
[ 1562.026831] loop1: detected capacity change from 0 to 4132
20:57:26 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000340)=""/189)
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000400))
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0x2, 0x3, 0x7f, 0x12, 0x0, 0xc18, 0x1001, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x4, 0x2}, 0x4804, 0x7f, 0x0, 0x0, 0x66, 0xf9, 0x9, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xb, r0, 0x8)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)

[ 1562.033074] EXT4-fs (loop4): inodes count not valid: 25632 vs 32
[ 1562.044386] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1562.046120] EXT4-fs (loop1): group descriptors corrupted!
[ 1562.072744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1562.103150] loop4: detected capacity change from 0 to 4132
20:57:26 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:57:26 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20f000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:26 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000001480)=""/4096, 0x1000)
getdents(r1, 0x0, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x7f, 0x20, 0x2, 0x0, 0x5, 0x80b05, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff9, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x1404, 0x4, 0x4, 0x7, 0x1, 0x6e9e41cc, 0x8001, 0x0, 0xfffffffa, 0x0, 0xe2d}, 0x0, 0x10, r2, 0x1)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r4 = syz_open_procfs$userns(0x0, &(0x7f0000000380))
r5 = open(&(0x7f00000003c0)='./file0\x00', 0x100000, 0x64)
dup2(r4, r5)
r6 = inotify_init()
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r7, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000063c0)={{0x1, 0x1, 0x18, <r8=>r0, {0x6}}, './file0\x00'})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000008600)=0xc)
syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6d706f6c3d696e7465036c656176653d72676c61746976653a302c6769643d", @ANYRESHEX=r9, @ANYBLOB=',\x00'])
[ 1562.110395] EXT4-fs (loop4): inodes count not valid: 61472 vs 32
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000000440)={0x1018, 0x3a, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x6e, 0x0, 0x0, @fd}, @generic="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"]}, 0x1018}, {&(0x7f0000002600)={0x1428, 0x2e, 0x0, 0x70bd29, 0x25dfdbfd, "", [@generic="fa99de12b445a6f74ddb09a6a0b4ce851db349adfe72d96d31fca4b07690b83205698da83c0be703b7c15cf35bde4a87221bba4e24bac40471db3a1f470c65da9256c39706f737b552e5660fc7f0498ca6fd093d7033b22ba015e7d9ef60", @typed={0x8, 0x3f, 0x0, 0x0, @fd=r0}, @generic="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", @typed={0x8, 0x67, 0x0, 0x0, @fd}, @nested={0xe0, 0x8d, 0x0, 0x1, [@typed={0xc, 0x54, 0x0, 0x0, @u64=0x6}, @generic="22eaea6cbffcea380acb1ed87ff0e1974dafa7088169d6a0e9735c3669fe10ede11a03bc7198359aaf1ec4c4e6f20a16d8f8bd7cdc6075fdebc3e8e2e945d32408e5011fca07a1d07c27b3a280ee5bb5012ea6cd69b39c08fc16af1f6ddf797ad14576032956eef272", @typed={0x8, 0x5b, 0x0, 0x0, @u32=0xffffffa8}, @generic="ace887d95528cb449aa0374587eb62d89718d58e0b964727eac1843534db1ccae132b0df9ac5b14b1464e2c92a7fcf03bfca6890228f4ff721cbd6e24ddb62801feb506ee8d0315996ad1fc39ba4ebc9f075a4f1b530552d105c76be1fd6b3"]}, @nested={0x1e3, 0xe, 0x0, 0x1, [@generic="364896a025081f9034e27131ff4a43282ed0e4a3ddb9e0f4261cea50229ea6227c68b5728a5c56a0fc5e392ff1468e93f2d68850828f3cea7ef6a4649290cb8fc8c193a92038df48da1a73d0fb2d71e7a0b18afb1b94ac7a09ac9f775e21c923", @typed={0x13, 0x2, 0x0, 0x0, @str='/proc/slabinfo\x00'}, @typed={0x8, 0x36, 0x0, 0x0, @fd}, @typed={0x8, 0x1f, 0x0, 0x0, @uid}, @generic="c58418dc63163209812d132fd7fc1f7dc2866c6d3157a914daa660868d851a9941dc4f4b194311178bd9e8b74fa347c0d85e59f7670dd759856ca6e8009db1acd3309b3e86be13083c754807ed7ef728076858ef105e19a9b0238fe42d08bf2ebbcf91a88d7597bb3d142d1ba52ced9307d84c6d71b37548e0d841403da2e9ee03e557b5", @generic="4642097eb6f19762c4615058e1df320c95116837f8e19431ca3e76b5ce9d3a01d306293ebee393325b3f51518a77ed147160dc5bd3fa37773346eca5adb89aaf74b70ca38bb6402fe52ee832819a28cda9c6e6b6d7dce0446538704fbe71589904cb2de8193405a09e4b813d4950f0cc1179ceb72367dc10cc16ba187026f3a1cfb8599ae6829c989586f32ae54516b23b0597dd339db775994e07fd6f9687469b862c8c36863bba86aeb202d8587252d68dbe91037e651ba66dc0e6334c8fd81cf426a3eb6feb008a43eb05294a1d053bf3fdfa7d3cc8"]}, @nested={0xe3, 0xe, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @pid}, @generic="e4cede8df704dce28db2df798a486aa54705569e7f3cd6c74a55b6f2f963ba79c8af57bb523804bcf56812d416dad7bdca36b5785a3e0826bb612b24f42e4458e23b", @generic="7d72a05af49cfb5f2f0a0f3aacd2f13b95d245d421bcb639b510d6134ba06a4b4968a76f0d26cc196ff750a174", @typed={0x8, 0x4b, 0x0, 0x0, @u32=0x7fffffff}, @typed={0x8, 0x21, 0x0, 0x0, @fd}, @typed={0x55, 0x5d, 0x0, 0x0, @binary="bdb37ee2e31a07b89b0591c823626379e4b6f55323f78aea63cfbe908d3f0f76415e77674119a1a1bd4f6e8c351698720afa171fac7deeafa8b9331e3c64c52e9cb18f843dc8842163fb787627d8f85a53"}]}]}, 0x1428}, {&(0x7f0000003a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080094008192000087e34e6e905b609ef4c1bb9bf14d55bbbe42ea409a2792d46f851173dd4789c1d66890e98af671f68cab00129764bc2666d4e84a89061809a13fee381ef379355f7b2b8450bb08c9efdd83f30bbb1018afa88a854489f9d30d9487a018646aa94791c2f869431508b8cd97e18c988c27c6c1d9f71c90c7da31dae71366d2771a9624e0686d0d155555e2a24d96b41ba5aa8c384876d58e9deabc09007d0070726f6300000000000000"], 0x230}, {&(0x7f00000064c0)={0x160c, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@nested={0xb4, 0x76, 0x0, 0x1, [@typed={0x13, 0x73, 0x0, 0x0, @str='/proc/slabinfo\x00'}, @generic="c67d6bc69b6b5e40714343eca97a636b541280b264f26a5f2a3cb76639a24b49e9d584ff7c28bebe0ec6b4fb686d80cb1d5b5851acad456ab09809767cac1111ab8132c6da56f02c03624f52f4307dcc9bdaec2ab8f234307f0028656fc43c56ec501f7ee0860f4803f3822e", @typed={0xc, 0x74, 0x0, 0x0, @str='ns/user\x00'}, @generic="7b5c6af042499e459101ede48215ad69b6f4b464726a92d0b83f754d2dec8d05f44b18cc"]}, @typed={0xc, 0x69, 0x0, 0x0, @u64=0x1ff}, @generic="de9b755e61b7ca366f372ae1fee5bf0c55f1b232c0c1e52bc6c9d97bc034953d7eaabadc089e39fc203de85d4b3e8d218cd4240e30c86353a0ce19c58fafd353dcc3dcf27d85d5261ec330004a7f16de062284", @nested={0x146, 0x83, 0x0, 0x1, [@generic="767bfa9c01eff761300834bd7093769485300857a2fe6114da07b2bce2a79859089841ee4d80aba3dd321cfc29830dfbc7a6858b071274da71b2fbe485228c73f2b3c556ed5abb8ae1fbacccbc381974f69122265b7421245beabf196ced01b9780f1d008ca5cbea885046e9c76bc093a2b589a65864d8cb530a792c9d859bfb27d3370fcff5a5cb1d58c7d6b7a2dbc639941ef58d7c436ecd8d260fdef8275ec2aa43b321c52aa7b255e36ed82cfc3b6d372c0905bac156bff72ad31b2e53a17e4f40314d5a539554b0d83db7c249f56bff2933236cf2282f6e17ca935e5dd5f2ddb23af9f77b52696b", @generic="b3c7cec7cc1123581e02d5902fe8b20d843d8bd1ef1ed12c65e5f8ee20f0631e5972584fe124412dc4e761a54611ed8a0774032d1158ce187cf67da4a1e1e396cabbff2b80b2d8132ee819b0f28872dfccd0a4b0e24c2f18"]}, @generic="e53216d3b70868dbfbbab07f20c75e182189e4f73274624946a03afffe3c333ec08d79feb08edff9e72c4738bf51508d4f34db54f5c6b90402a71feadc1c47608f7f5b700bafd21b948b4fdbc73fd8", @nested={0x119, 0x87, 0x0, 0x1, [@generic="3c4c2fde6cd3088327130611b5155bff896b65704b6551a0ae35bed992b2", @typed={0x8, 0x91, 0x0, 0x0, @uid}, @generic="e64c1a359908b9d94934e70d5a8817f5337c6d46e239", @generic="dc598e78e3c430c1c0371683514fb24eaae9033ebdafefa12fb784dab0600973df3b64f575866833543059674cb46ec35fbc93c503f152a28be28a4dc56103c70d49d5737576ba74be2f46777ef07ef7acfdce80695d2355b7565198a74d49fe5462422fa10fbb75560a", @typed={0x8, 0x14, 0x0, 0x0, @fd}, @typed={0x8, 0x59, 0x0, 0x0, @uid}, @generic="feae38e7935fb841ad6eb7132b8cf82c5051217fc24d024eea98657d0b6197822e2402a7db7bd940609503ef5a2e98731b81c0a305becd7d0f6f3478f1b3ee", @typed={0x8, 0x93, 0x0, 0x0, @fd}, @generic="37e33c7af0b54352811dc05fa48adc92836365740b687e30"]}, @nested={0x1231, 0x82, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@multicast1}, @generic="10d097beebcad2ac0a6e00ab1ed74bb9a193b6cfa847feab5b1d7b199b89ae03408d4671aa455dd6d9967ffbf6cb9620bd214de83d00e3249062ac25b3ed9ef4f4f7d1a5651dab1e5c1609b86917dedc7f068b65a7fe5e1e7946ec73211f9faa204b3d8cf87402229f766490bb58698ebc64c3c80ec80336de5db203e82d6d791408f5698c16c2d4a793091a32d1470a8e83406f7e87ff942606decb63c8282941222c2d9ebda3293ffbc4de0f6b0f4a6103c18c30f0447ab6ec2bed41e4f7662657da", @generic="93028b8fdde687217ad3c5ae831424af920fb90c28d5aa78dd96a95ace23c9a5242730d497e23e6dd6ab4b842e659a2be7d3745db5efa56c7a4d44df0cbe69d47fbba4755bb6222ca43019bece2ab834b82e0d203ddc805c6a333897c0a5dce57ba801151c7f9403624f45fb9631cdb0000164f98bbae6e07ea335578f251792ada4958a3af853b6a993ff4fdfc0a0aca91f7b83ed381c9ed2457a27507289cbc85f8ec268248675ada753c6398217d6b96437bb91a632f4c8c903209ad2607bbab7c32a72a41691a96b718c3050ea006e672d94fa73309811b63e0d96809016d9bcb77bc8147db617c1", @typed={0xc, 0x93, 0x0, 0x0, @str='ns/user\x00'}, @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@broadcast}, @generic="b748d69ca836397d9bf00ce8471ea4a9f7c8565f8ffeeff2a4bcfb830342ecf8176afdd4e197233397654d88962c390ddf4fb4f52bdb4814ea90b8a94994aad8f19036ab3d771e73", @typed={0x8, 0x46, 0x0, 0x0, @ipv4=@multicast2}, @generic="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", @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x77, 0x0, 0x0, @fd}]}]}, 0x160c}, {&(0x7f0000005280)={0x1080, 0x16, 0x4, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x3e, 0x0, 0x0, @fd}, @generic="bb2ac2ce4f33e9afd2f2553c78a4aa9a75a197125e8243648fc2fa4fdd092aa6628eed83067c3d556e276dcf4fdac416ba8222d17cc720325b3583eed8b104bfb7eb5b9521e70996ab8261930943e8e2e95cf9d0f17242849af1285f189c90030fecde1e0f2aff", @generic="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"]}, 0x1080}], 0x5, &(0x7f0000006400)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r9}}}], 0x80, 0x4000000}, 0x8010)

[ 1562.118695] loop4: detected capacity change from 0 to 4132
[ 1562.130463] EXT4-fs (loop4): inodes count not valid: 61472 vs 32
[ 1562.204879] tmpfs: Bad value for 'mpol'
[ 1562.223658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:57:36 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6305, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:36 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000001480)=""/4096, 0x1000)
getdents(r1, 0x0, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x7f, 0x20, 0x2, 0x0, 0x5, 0x80b05, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff9, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x1404, 0x4, 0x4, 0x7, 0x1, 0x6e9e41cc, 0x8001, 0x0, 0xfffffffa, 0x0, 0xe2d}, 0x0, 0x10, r2, 0x1)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r4 = syz_open_procfs$userns(0x0, &(0x7f0000000380))
r5 = open(&(0x7f00000003c0)='./file0\x00', 0x100000, 0x64)
dup2(r4, r5)
r6 = inotify_init()
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r7, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000063c0)={{0x1, 0x1, 0x18, <r8=>r0, {0x6}}, './file0\x00'})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000008600)=0xc)
syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6d706f6c3d696e7465036c656176653d72676c61746976653a302c6769643d", @ANYRESHEX=r9, @ANYBLOB=',\x00'])
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000000440)={0x1018, 0x3a, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x6e, 0x0, 0x0, @fd}, @generic="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"]}, 0x1018}, {&(0x7f0000002600)={0x1428, 0x2e, 0x0, 0x70bd29, 0x25dfdbfd, "", [@generic="fa99de12b445a6f74ddb09a6a0b4ce851db349adfe72d96d31fca4b07690b83205698da83c0be703b7c15cf35bde4a87221bba4e24bac40471db3a1f470c65da9256c39706f737b552e5660fc7f0498ca6fd093d7033b22ba015e7d9ef60", @typed={0x8, 0x3f, 0x0, 0x0, @fd=r0}, @generic="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", @typed={0x8, 0x67, 0x0, 0x0, @fd}, @nested={0xe0, 0x8d, 0x0, 0x1, [@typed={0xc, 0x54, 0x0, 0x0, @u64=0x6}, @generic="22eaea6cbffcea380acb1ed87ff0e1974dafa7088169d6a0e9735c3669fe10ede11a03bc7198359aaf1ec4c4e6f20a16d8f8bd7cdc6075fdebc3e8e2e945d32408e5011fca07a1d07c27b3a280ee5bb5012ea6cd69b39c08fc16af1f6ddf797ad14576032956eef272", @typed={0x8, 0x5b, 0x0, 0x0, @u32=0xffffffa8}, @generic="ace887d95528cb449aa0374587eb62d89718d58e0b964727eac1843534db1ccae132b0df9ac5b14b1464e2c92a7fcf03bfca6890228f4ff721cbd6e24ddb62801feb506ee8d0315996ad1fc39ba4ebc9f075a4f1b530552d105c76be1fd6b3"]}, @nested={0x1e3, 0xe, 0x0, 0x1, [@generic="364896a025081f9034e27131ff4a43282ed0e4a3ddb9e0f4261cea50229ea6227c68b5728a5c56a0fc5e392ff1468e93f2d68850828f3cea7ef6a4649290cb8fc8c193a92038df48da1a73d0fb2d71e7a0b18afb1b94ac7a09ac9f775e21c923", @typed={0x13, 0x2, 0x0, 0x0, @str='/proc/slabinfo\x00'}, @typed={0x8, 0x36, 0x0, 0x0, @fd}, @typed={0x8, 0x1f, 0x0, 0x0, @uid}, @generic="c58418dc63163209812d132fd7fc1f7dc2866c6d3157a914daa660868d851a9941dc4f4b194311178bd9e8b74fa347c0d85e59f7670dd759856ca6e8009db1acd3309b3e86be13083c754807ed7ef728076858ef105e19a9b0238fe42d08bf2ebbcf91a88d7597bb3d142d1ba52ced9307d84c6d71b37548e0d841403da2e9ee03e557b5", @generic="4642097eb6f19762c4615058e1df320c95116837f8e19431ca3e76b5ce9d3a01d306293ebee393325b3f51518a77ed147160dc5bd3fa37773346eca5adb89aaf74b70ca38bb6402fe52ee832819a28cda9c6e6b6d7dce0446538704fbe71589904cb2de8193405a09e4b813d4950f0cc1179ceb72367dc10cc16ba187026f3a1cfb8599ae6829c989586f32ae54516b23b0597dd339db775994e07fd6f9687469b862c8c36863bba86aeb202d8587252d68dbe91037e651ba66dc0e6334c8fd81cf426a3eb6feb008a43eb05294a1d053bf3fdfa7d3cc8"]}, @nested={0xe3, 0xe, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @pid}, @generic="e4cede8df704dce28db2df798a486aa54705569e7f3cd6c74a55b6f2f963ba79c8af57bb523804bcf56812d416dad7bdca36b5785a3e0826bb612b24f42e4458e23b", @generic="7d72a05af49cfb5f2f0a0f3aacd2f13b95d245d421bcb639b510d6134ba06a4b4968a76f0d26cc196ff750a174", @typed={0x8, 0x4b, 0x0, 0x0, @u32=0x7fffffff}, @typed={0x8, 0x21, 0x0, 0x0, @fd}, @typed={0x55, 0x5d, 0x0, 0x0, @binary="bdb37ee2e31a07b89b0591c823626379e4b6f55323f78aea63cfbe908d3f0f76415e77674119a1a1bd4f6e8c351698720afa171fac7deeafa8b9331e3c64c52e9cb18f843dc8842163fb787627d8f85a53"}]}]}, 0x1428}, {&(0x7f0000003a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080094008192000087e34e6e905b609ef4c1bb9bf14d55bbbe42ea409a2792d46f851173dd4789c1d66890e98af671f68cab00129764bc2666d4e84a89061809a13fee381ef379355f7b2b8450bb08c9efdd83f30bbb1018afa88a854489f9d30d9487a018646aa94791c2f869431508b8cd97e18c988c27c6c1d9f71c90c7da31dae71366d2771a9624e0686d0d155555e2a24d96b41ba5aa8c384876d58e9deabc09007d0070726f6300000000000000"], 0x230}, {&(0x7f00000064c0)={0x160c, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@nested={0xb4, 0x76, 0x0, 0x1, [@typed={0x13, 0x73, 0x0, 0x0, @str='/proc/slabinfo\x00'}, @generic="c67d6bc69b6b5e40714343eca97a636b541280b264f26a5f2a3cb76639a24b49e9d584ff7c28bebe0ec6b4fb686d80cb1d5b5851acad456ab09809767cac1111ab8132c6da56f02c03624f52f4307dcc9bdaec2ab8f234307f0028656fc43c56ec501f7ee0860f4803f3822e", @typed={0xc, 0x74, 0x0, 0x0, @str='ns/user\x00'}, @generic="7b5c6af042499e459101ede48215ad69b6f4b464726a92d0b83f754d2dec8d05f44b18cc"]}, @typed={0xc, 0x69, 0x0, 0x0, @u64=0x1ff}, @generic="de9b755e61b7ca366f372ae1fee5bf0c55f1b232c0c1e52bc6c9d97bc034953d7eaabadc089e39fc203de85d4b3e8d218cd4240e30c86353a0ce19c58fafd353dcc3dcf27d85d5261ec330004a7f16de062284", @nested={0x146, 0x83, 0x0, 0x1, [@generic="767bfa9c01eff761300834bd7093769485300857a2fe6114da07b2bce2a79859089841ee4d80aba3dd321cfc29830dfbc7a6858b071274da71b2fbe485228c73f2b3c556ed5abb8ae1fbacccbc381974f69122265b7421245beabf196ced01b9780f1d008ca5cbea885046e9c76bc093a2b589a65864d8cb530a792c9d859bfb27d3370fcff5a5cb1d58c7d6b7a2dbc639941ef58d7c436ecd8d260fdef8275ec2aa43b321c52aa7b255e36ed82cfc3b6d372c0905bac156bff72ad31b2e53a17e4f40314d5a539554b0d83db7c249f56bff2933236cf2282f6e17ca935e5dd5f2ddb23af9f77b52696b", @generic="b3c7cec7cc1123581e02d5902fe8b20d843d8bd1ef1ed12c65e5f8ee20f0631e5972584fe124412dc4e761a54611ed8a0774032d1158ce187cf67da4a1e1e396cabbff2b80b2d8132ee819b0f28872dfccd0a4b0e24c2f18"]}, @generic="e53216d3b70868dbfbbab07f20c75e182189e4f73274624946a03afffe3c333ec08d79feb08edff9e72c4738bf51508d4f34db54f5c6b90402a71feadc1c47608f7f5b700bafd21b948b4fdbc73fd8", @nested={0x119, 0x87, 0x0, 0x1, [@generic="3c4c2fde6cd3088327130611b5155bff896b65704b6551a0ae35bed992b2", @typed={0x8, 0x91, 0x0, 0x0, @uid}, @generic="e64c1a359908b9d94934e70d5a8817f5337c6d46e239", @generic="dc598e78e3c430c1c0371683514fb24eaae9033ebdafefa12fb784dab0600973df3b64f575866833543059674cb46ec35fbc93c503f152a28be28a4dc56103c70d49d5737576ba74be2f46777ef07ef7acfdce80695d2355b7565198a74d49fe5462422fa10fbb75560a", @typed={0x8, 0x14, 0x0, 0x0, @fd}, @typed={0x8, 0x59, 0x0, 0x0, @uid}, @generic="feae38e7935fb841ad6eb7132b8cf82c5051217fc24d024eea98657d0b6197822e2402a7db7bd940609503ef5a2e98731b81c0a305becd7d0f6f3478f1b3ee", @typed={0x8, 0x93, 0x0, 0x0, @fd}, @generic="37e33c7af0b54352811dc05fa48adc92836365740b687e30"]}, @nested={0x1231, 0x82, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@multicast1}, @generic="10d097beebcad2ac0a6e00ab1ed74bb9a193b6cfa847feab5b1d7b199b89ae03408d4671aa455dd6d9967ffbf6cb9620bd214de83d00e3249062ac25b3ed9ef4f4f7d1a5651dab1e5c1609b86917dedc7f068b65a7fe5e1e7946ec73211f9faa204b3d8cf87402229f766490bb58698ebc64c3c80ec80336de5db203e82d6d791408f5698c16c2d4a793091a32d1470a8e83406f7e87ff942606decb63c8282941222c2d9ebda3293ffbc4de0f6b0f4a6103c18c30f0447ab6ec2bed41e4f7662657da", @generic="93028b8fdde687217ad3c5ae831424af920fb90c28d5aa78dd96a95ace23c9a5242730d497e23e6dd6ab4b842e659a2be7d3745db5efa56c7a4d44df0cbe69d47fbba4755bb6222ca43019bece2ab834b82e0d203ddc805c6a333897c0a5dce57ba801151c7f9403624f45fb9631cdb0000164f98bbae6e07ea335578f251792ada4958a3af853b6a993ff4fdfc0a0aca91f7b83ed381c9ed2457a27507289cbc85f8ec268248675ada753c6398217d6b96437bb91a632f4c8c903209ad2607bbab7c32a72a41691a96b718c3050ea006e672d94fa73309811b63e0d96809016d9bcb77bc8147db617c1", @typed={0xc, 0x93, 0x0, 0x0, @str='ns/user\x00'}, @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@broadcast}, @generic="b748d69ca836397d9bf00ce8471ea4a9f7c8565f8ffeeff2a4bcfb830342ecf8176afdd4e197233397654d88962c390ddf4fb4f52bdb4814ea90b8a94994aad8f19036ab3d771e73", @typed={0x8, 0x46, 0x0, 0x0, @ipv4=@multicast2}, @generic="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", @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x77, 0x0, 0x0, @fd}]}]}, 0x160c}, {&(0x7f0000005280)={0x1080, 0x16, 0x4, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x3e, 0x0, 0x0, @fd}, @generic="bb2ac2ce4f33e9afd2f2553c78a4aa9a75a197125e8243648fc2fa4fdd092aa6628eed83067c3d556e276dcf4fdac416ba8222d17cc720325b3583eed8b104bfb7eb5b9521e70996ab8261930943e8e2e95cf9d0f17242849af1285f189c90030fecde1e0f2aff", @generic="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"]}, 0x1080}], 0x5, &(0x7f0000006400)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r9}}}], 0x80, 0x4000000}, 0x8010)

20:57:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:57:36 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x0) (fail_nth: 1)

20:57:36 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 30)

20:57:36 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x1, 0x8001}, 0x240, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000180)='./file0\x00', 0x40)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x7, 0x80, 0x0, 0x81, 0x8, 0x83, 0x0, 0x100000001, 0x80, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f0000000340), 0xd}, 0x12601, 0x1, 0x8001, 0x9, 0x9cea, 0x4, 0x9f5, 0x0, 0x4000000, 0x0, 0x8001}, 0xffffffffffffffff, 0x5, r1, 0x9)
r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x6, 0x0, 0x4, 0x0, 0x400, 0x82028, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9090, 0x4, @perf_bp={&(0x7f0000000300), 0xc}, 0x4581, 0x80000000, 0x8001, 0x1, 0x8, 0x43fc, 0x1, 0x0, 0x66}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000480))
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)

20:57:36 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:36 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20f500000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1572.882320] tmpfs: Bad value for 'mpol'
[ 1572.896955] FAULT_INJECTION: forcing a failure.
[ 1572.896955] name failslab, interval 1, probability 0, space 0, times 0
[ 1572.898654] CPU: 0 UID: 0 PID: 11493 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1572.898684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1572.898698] Call Trace:
[ 1572.898706]  <TASK>
[ 1572.898715]  dump_stack_lvl+0xfa/0x120
[ 1572.898758]  should_fail_ex+0x4d7/0x5e0
[ 1572.898789]  should_failslab+0xc2/0x120
[ 1572.898821]  __kvmalloc_node_noprof+0x11f/0x900
[ 1572.898850]  ? seq_read_iter+0x9ee/0x1320
[ 1572.898883]  ? seq_read_iter+0x9ee/0x1320
[ 1572.898907]  seq_read_iter+0x9ee/0x1320
[ 1572.898932]  ? _kstrtoull+0x13e/0x200
[ 1572.898982]  seq_read+0x375/0x540
[ 1572.899007]  ? __pfx_seq_read+0x10/0x10
[ 1572.899034]  ? ext4_fc_del+0x201/0x8d0
[ 1572.899059]  ? iov_iter_init+0x49/0x1c0
[ 1572.899085]  ? avc_policy_seqno+0x9/0x20
[ 1572.899116]  ? selinux_file_permission+0x99/0x600
[ 1572.899147]  ? __pfx_seq_read+0x10/0x10
[ 1572.899174]  proc_reg_read+0x120/0x310
[ 1572.899203]  ? __pfx_proc_reg_read+0x10/0x10
[ 1572.899229]  vfs_readv+0x612/0x7f0
[ 1572.899260]  ? __pfx_vfs_readv+0x10/0x10
[ 1572.899284]  ? find_held_lock+0x2b/0x80
[ 1572.899312]  ? __fget_files+0x34/0x3b0
[ 1572.899340]  ? find_held_lock+0x2b/0x80
[ 1572.899363]  ? lock_release+0xc8/0x270
[ 1572.899395]  ? __fget_files+0x20d/0x3b0
[ 1572.899432]  do_preadv+0x1ab/0x280
[ 1572.899458]  ? __pfx_do_preadv+0x10/0x10
[ 1572.899481]  ? irqentry_exit+0xee/0x650
[ 1572.899514]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1572.899546]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1572.899581]  do_syscall_64+0xbf/0x420
[ 1572.899605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1572.899628] RIP: 0033:0x7f26795c2b19
[ 1572.899645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1572.899668] RSP: 002b:00007f2676b38188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1572.899690] RAX: ffffffffffffffda RBX: 00007f26796d5f60 RCX: 00007f26795c2b19
[ 1572.899705] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000004
[ 1572.899719] RBP: 00007f2676b381d0 R08: 0000000000000000 R09: 0000000000000000
[ 1572.899733] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001
[ 1572.899747] R13: 00007ffd5e44c26f R14: 00007f2676b38300 R15: 0000000000022000
[ 1572.899775]  </TASK>
[ 1572.932479] loop5: detected capacity change from 0 to 512
[ 1572.946922] loop2: detected capacity change from 0 to 4132
[ 1572.950312] loop1: detected capacity change from 0 to 4132
[ 1572.963839] loop4: detected capacity change from 0 to 4132
[ 1572.964745] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1572.966156] EXT4-fs (loop1): group descriptors corrupted!
[ 1572.984950] loop1: detected capacity change from 0 to 4132
[ 1572.986264] EXT4-fs (loop4): inodes count not valid: 62752 vs 32
20:57:37 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 1)

[ 1572.996421] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1572.999567] EXT4-fs (loop1): group descriptors corrupted!
[ 1573.002842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1573.006789] loop4: detected capacity change from 0 to 4132
[ 1573.015429] EXT4-fs (loop4): inodes count not valid: 62752 vs 32
[ 1573.061948] FAULT_INJECTION: forcing a failure.
[ 1573.061948] name failslab, interval 1, probability 0, space 0, times 0
[ 1573.063870] CPU: 1 UID: 0 PID: 11508 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1573.063900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1573.063913] Call Trace:
[ 1573.063921]  <TASK>
[ 1573.063930]  dump_stack_lvl+0xfa/0x120
[ 1573.063979]  should_fail_ex+0x4d7/0x5e0
[ 1573.064008]  ? __do_sys_memfd_create+0x1e5/0xaa0
[ 1573.064033]  should_failslab+0xc2/0x120
[ 1573.064064]  __kmalloc_cache_noprof+0x80/0x730
[ 1573.064108]  ? __do_sys_memfd_create+0x1e5/0xaa0
[ 1573.064132]  __do_sys_memfd_create+0x1e5/0xaa0
[ 1573.064157]  ? ksys_write+0x1a3/0x240
[ 1573.064185]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1573.064208]  ? irqentry_exit+0xee/0x650
[ 1573.064241]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1573.064271]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1573.064308]  do_syscall_64+0xbf/0x420
[ 1573.064331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1573.064354] RIP: 0033:0x7fedf4849b19
[ 1573.064371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1573.064393] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1573.064417] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4849b19
[ 1573.064433] RDX: 0000000000008400 RSI: 0000000000000000 RDI: 00007fedf48a30fb
[ 1573.064447] RBP: 0000000000000003 R08: 0000000000004200 R09: ffffffffffffffff
[ 1573.064460] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1573.064473] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00
[ 1573.064501]  </TASK>
[ 1573.157449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:57:46 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
fcntl$dupfd(r0, 0x0, r2)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)

20:57:46 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8003, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:46 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20fe00000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:46 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:57:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 2)

20:57:46 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x0) (fail_nth: 2)

20:57:46 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 31)

20:57:46 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1582.145544] loop3: detected capacity change from 0 to 512
[ 1582.146497] loop2: detected capacity change from 0 to 4132
[ 1582.147599] loop4: detected capacity change from 0 to 4132
[ 1582.161157] EXT4-fs (loop4): inodes count not valid: 65056 vs 32
[ 1582.171248] loop4: detected capacity change from 0 to 4132
[ 1582.173093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1582.174328] loop1: detected capacity change from 0 to 4132
[ 1582.179586] EXT4-fs (loop4): inodes count not valid: 65056 vs 32
[ 1582.183231] FAULT_INJECTION: forcing a failure.
[ 1582.183231] name failslab, interval 1, probability 0, space 0, times 0
[ 1582.185148] CPU: 0 UID: 0 PID: 11533 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1582.185180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1582.185194] Call Trace:
[ 1582.185202]  <TASK>
[ 1582.185212]  dump_stack_lvl+0xfa/0x120
[ 1582.185258]  should_fail_ex+0x4d7/0x5e0
[ 1582.185291]  ? __kernfs_new_node+0xd3/0x930
[ 1582.185316]  should_failslab+0xc2/0x120
[ 1582.185349]  kmem_cache_alloc_noprof+0x80/0x710
[ 1582.185382]  ? __kernfs_new_node+0xd3/0x930
[ 1582.185405]  __kernfs_new_node+0xd3/0x930
[ 1582.185434]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1582.185464]  ? lock_acquire+0x15e/0x2d0
[ 1582.185494]  ? kernfs_root+0x23/0x2a0
[ 1582.185518]  ? find_held_lock+0x2b/0x80
[ 1582.185541]  ? kernfs_root+0xee/0x2a0
[ 1582.185564]  ? lock_release+0xc8/0x270
[ 1582.185592]  ? lock_is_held_type+0x9e/0x120
[ 1582.185634]  kernfs_new_node+0x13c/0x1e0
[ 1582.185667]  __kernfs_create_file+0x55/0x360
[ 1582.185704]  sysfs_add_file_mode_ns+0x21c/0x430
[ 1582.185731]  ? __pfx_dev_attr_store+0x10/0x10
[ 1582.185786]  internal_create_group+0x662/0xeb0
[ 1582.185822]  ? __pfx_internal_create_group+0x10/0x10
[ 1582.185847]  ? blk_validate_limits+0xc27/0x15c0
[ 1582.185886]  ? lock_is_held_type+0x9e/0x120
[ 1582.185925]  loop_configure+0xc46/0x15a0
[ 1582.185990]  ? __pfx_loop_configure+0x10/0x10
[ 1582.186042]  ? avc_has_extended_perms+0x107/0xf20
[ 1582.186077]  ? find_held_lock+0x2b/0x80
[ 1582.186099]  ? avc_has_extended_perms+0x23b/0xf20
[ 1582.186133]  ? lock_release+0xc8/0x270
[ 1582.186166]  lo_ioctl+0x66d/0x1ca0
[ 1582.186206]  ? __pfx_lo_ioctl+0x10/0x10
[ 1582.186239]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1582.186281]  ? lock_acquire+0x15e/0x2d0
[ 1582.186309]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1582.186337]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1582.186373]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1582.186405]  ? lock_release+0xc8/0x270
[ 1582.186438]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1582.186505]  ? check_irq_usage+0x210/0xb40
[ 1582.186533]  ? __fget_files+0x34/0x3b0
[ 1582.186563]  ? find_held_lock+0x2b/0x80
[ 1582.186585]  ? __fget_files+0x203/0x3b0
[ 1582.186617]  ? __pfx_lo_ioctl+0x10/0x10
[ 1582.186651]  blkdev_ioctl+0x365/0x6d0
[ 1582.186687]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1582.186724]  ? selinux_file_ioctl+0xb9/0x280
[ 1582.186753]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1582.186790]  __x64_sys_ioctl+0x18f/0x210
[ 1582.186818]  do_syscall_64+0xbf/0x420
[ 1582.186844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1582.186868] RIP: 0033:0x7f73dfd328d7
[ 1582.186887] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1582.186910] RSP: 002b:00007f73dd2a7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1582.186933] RAX: ffffffffffffffda RBX: 00007f73dfd7c970 RCX: 00007f73dfd328d7
[ 1582.186949] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1582.186963] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1582.186977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1582.186991] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1582.187021]  </TASK>
[ 1582.248467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:57:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 3)

[ 1582.259256] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1582.260894] EXT4-fs (loop1): group descriptors corrupted!
[ 1582.266191] loop5: detected capacity change from 0 to 512
20:57:46 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1582.294807] loop1: detected capacity change from 0 to 4132
20:57:46 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200003000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1582.325933] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1582.327751] EXT4-fs (loop1): group descriptors corrupted!
20:57:46 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x0) (fail_nth: 3)

[ 1582.354732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1582.356731] FAULT_INJECTION: forcing a failure.
[ 1582.356731] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1582.356759] CPU: 1 UID: 0 PID: 11542 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1582.356776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1582.356785] Call Trace:
[ 1582.356790]  <TASK>
[ 1582.356795]  dump_stack_lvl+0xfa/0x120
[ 1582.356824]  should_fail_ex+0x4d7/0x5e0
[ 1582.356843]  strncpy_from_user+0x3b/0x2f0
[ 1582.356864]  __do_sys_memfd_create+0x21d/0xaa0
[ 1582.356880]  ? ksys_write+0x1a3/0x240
[ 1582.356896]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1582.356909]  ? irqentry_exit+0xee/0x650
[ 1582.356928]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1582.356946]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1582.356973]  do_syscall_64+0xbf/0x420
[ 1582.356987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1582.357000] RIP: 0033:0x7fedf4849b19
[ 1582.357011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1582.357024] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1582.357036] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4849b19
20:57:46 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99)
io_submit(0x0, 0x2000000000000193, &(0x7f0000000240))
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2)

20:57:46 executing program 0:
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:57:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 4)

[ 1582.357045] RDX: 0000000000008400 RSI: 0000000000000000 RDI: 00007fedf48a30fb
[ 1582.357053] RBP: 0000000000000003 R08: 0000000000004200 R09: ffffffffffffffff
[ 1582.357061] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1582.357069] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00
[ 1582.357085]  </TASK>
20:57:46 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb200, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1582.412775] loop1: detected capacity change from 0 to 4132
[ 1582.416212] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1582.417088] EXT4-fs (loop1): group descriptors corrupted!
[ 1582.420335] loop1: detected capacity change from 0 to 4132
[ 1582.420899] loop4: detected capacity change from 0 to 4132
[ 1582.422907] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1582.423826] EXT4-fs (loop1): group descriptors corrupted!
[ 1582.428058] FAULT_INJECTION: forcing a failure.
[ 1582.428058] name failslab, interval 1, probability 0, space 0, times 0
[ 1582.429946] CPU: 0 UID: 0 PID: 11551 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1582.429993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1582.430010] Call Trace:
[ 1582.430020]  <TASK>
[ 1582.430033]  dump_stack_lvl+0xfa/0x120
[ 1582.430089]  should_fail_ex+0x4d7/0x5e0
[ 1582.430127]  ? shmem_alloc_inode+0x27/0x50
[ 1582.430162]  should_failslab+0xc2/0x120
[ 1582.430207]  kmem_cache_alloc_lru_noprof+0x84/0x720
20:57:46 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb300, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1582.430247]  ? shmem_alloc_inode+0x27/0x50
[ 1582.430282]  shmem_alloc_inode+0x27/0x50
[ 1582.430315]  ? __pfx_shmem_alloc_inode+0x10/0x10
[ 1582.430349]  alloc_inode+0x67/0x250
[ 1582.430380]  new_inode+0x1e/0x160
[ 1582.430415]  __shmem_get_inode+0x17c/0xe80
[ 1582.430467]  __shmem_file_setup+0x108/0x370
[ 1582.430512]  __do_sys_memfd_create+0x2ce/0xaa0
[ 1582.430549]  ? ksys_write+0x1a3/0x240
[ 1582.430593]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1582.430631]  ? irqentry_exit+0xee/0x650
[ 1582.430685]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1582.430724]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1582.430764]  do_syscall_64+0xbf/0x420
[ 1582.430789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1582.430814] RIP: 0033:0x7fedf4849b19
[ 1582.430832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1582.430855] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1582.430878] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4849b19
[ 1582.430894] RDX: 0000000000008400 RSI: 0000000000000000 RDI: 00007fedf48a30fb
[ 1582.430908] RBP: 0000000000000003 R08: 0000000000004200 R09: ffffffffffffffff
[ 1582.430923] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1582.430937] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00
[ 1582.430968]  </TASK>
[ 1582.463089] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1582.463923] EXT4-fs (loop1): group descriptors corrupted!
[ 1582.485028] EXT4-fs (loop4): inodes count not valid: 196640 vs 32
[ 1582.491538] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1582.492416] EXT4-fs (loop1): group descriptors corrupted!
[ 1582.518819] EXT4-fs (loop4): inodes count not valid: 196640 vs 32
20:57:46 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb400, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1582.533903] FAULT_INJECTION: forcing a failure.
[ 1582.533903] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1582.534916] CPU: 1 UID: 0 PID: 11557 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1582.534933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1582.534941] Call Trace:
[ 1582.534946]  <TASK>
[ 1582.534951]  dump_stack_lvl+0xfa/0x120
[ 1582.534983]  should_fail_ex+0x4d7/0x5e0
[ 1582.535002]  _copy_to_iter+0x578/0x1660
[ 1582.535019]  ? find_held_lock+0x2b/0x80
[ 1582.535034]  ? __pfx__copy_to_iter+0x10/0x10
[ 1582.535050]  ? __virt_addr_valid+0x100/0x5d0
[ 1582.535066]  ? __check_object_size+0x5b3/0x980
[ 1582.535084]  seq_read_iter+0x728/0x1320
[ 1582.535099]  ? _kstrtoull+0x13e/0x200
[ 1582.535122]  seq_read+0x375/0x540
[ 1582.535136]  ? __pfx_seq_read+0x10/0x10
[ 1582.535150]  ? ext4_fc_del+0x201/0x8d0
[ 1582.535164]  ? iov_iter_init+0x49/0x1c0
[ 1582.535178]  ? avc_policy_seqno+0x9/0x20
[ 1582.535196]  ? selinux_file_permission+0x99/0x600
[ 1582.535212]  ? __pfx_seq_read+0x10/0x10
[ 1582.535227]  proc_reg_read+0x120/0x310
[ 1582.535244]  ? __pfx_proc_reg_read+0x10/0x10
[ 1582.535257]  vfs_readv+0x612/0x7f0
[ 1582.535275]  ? __pfx_vfs_readv+0x10/0x10
[ 1582.535288]  ? find_held_lock+0x2b/0x80
[ 1582.535302]  ? __fget_files+0x34/0x3b0
[ 1582.535318]  ? find_held_lock+0x2b/0x80
[ 1582.535331]  ? lock_release+0xc8/0x270
[ 1582.535348]  ? __fget_files+0x20d/0x3b0
[ 1582.535369]  do_preadv+0x1ab/0x280
[ 1582.535383]  ? __pfx_do_preadv+0x10/0x10
[ 1582.535395]  ? irqentry_exit+0xee/0x650
[ 1582.535413]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1582.535431]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1582.535450]  do_syscall_64+0xbf/0x420
[ 1582.535464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1582.535477] RIP: 0033:0x7f26795c2b19
[ 1582.535488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1582.535500] RSP: 002b:00007f2676b38188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1582.535513] RAX: ffffffffffffffda RBX: 00007f26796d5f60 RCX: 00007f26795c2b19
[ 1582.535521] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000004
[ 1582.535529] RBP: 00007f2676b381d0 R08: 0000000000000000 R09: 0000000000000000
[ 1582.535537] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001
[ 1582.535544] R13: 00007ffd5e44c26f R14: 00007f2676b38300 R15: 0000000000022000
[ 1582.535560]  </TASK>
20:57:46 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 32)

20:57:46 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000013e00))

[ 1582.571808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:57:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 5)

[ 1582.610900] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1582.611864] EXT4-fs (loop1): group descriptors corrupted!
20:57:46 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20e803000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1582.632943] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1582.633768] EXT4-fs (loop1): group descriptors corrupted!
20:57:46 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99)
io_submit(0x0, 0x2000000000000193, &(0x7f0000000240))
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2)

[ 1582.671311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1582.694358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1582.707630] No source specified
[ 1582.738579] EXT4-fs (loop4): inodes count not valid: 256032 vs 32
[ 1582.753201] EXT4-fs (loop4): inodes count not valid: 256032 vs 32
[ 1582.764161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1582.783947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:57:55 executing program 0:
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:57:55 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x0) (fail_nth: 4)

20:57:55 executing program 7:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x88e10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x0, 0x33, 0x1, 0x0, 0x0, 0xff, 0x0, 0x5, 0x0, 0x100000001}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$clear(0x7, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r0, &(0x7f0000000900)="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", 0x200)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x17, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x100000001, 0x401)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ec", 0x1, r2)
add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x17, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1)
fcntl$setstatus(r1, 0x4, 0x40000)
close(0xffffffffffffffff)
sendfile(r0, r1, 0x0, 0xfdef)

20:57:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 33)

20:57:55 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 6)

20:57:55 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000013e00))

20:57:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="208004000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:57:55 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xbc04, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1591.524902] set_capacity_and_notify: 10 callbacks suppressed
[ 1591.524919] loop1: detected capacity change from 0 to 4132
[ 1591.531530] loop4: detected capacity change from 0 to 4132
[ 1591.531722] FAULT_INJECTION: forcing a failure.
[ 1591.531722] name failslab, interval 1, probability 0, space 0, times 0
[ 1591.534022] CPU: 1 UID: 0 PID: 11591 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1591.534045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1591.534056] Call Trace:
[ 1591.534062]  <TASK>
[ 1591.534069]  dump_stack_lvl+0xfa/0x120
[ 1591.534104]  should_fail_ex+0x4d7/0x5e0
[ 1591.534128]  ? __kernfs_new_node+0xd3/0x930
[ 1591.534146]  should_failslab+0xc2/0x120
[ 1591.534171]  kmem_cache_alloc_noprof+0x80/0x710
[ 1591.534194]  ? __kernfs_new_node+0xd3/0x930
[ 1591.534211]  __kernfs_new_node+0xd3/0x930
[ 1591.534231]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1591.534252]  ? lock_acquire+0x15e/0x2d0
[ 1591.534274]  ? kernfs_root+0x23/0x2a0
[ 1591.534291]  ? find_held_lock+0x2b/0x80
[ 1591.534308]  ? kernfs_root+0xee/0x2a0
[ 1591.534325]  ? lock_release+0xc8/0x270
[ 1591.534344]  ? lock_is_held_type+0x9e/0x120
[ 1591.534374]  kernfs_new_node+0x13c/0x1e0
[ 1591.534397]  __kernfs_create_file+0x55/0x360
[ 1591.534424]  sysfs_add_file_mode_ns+0x21c/0x430
[ 1591.534443]  ? __pfx_dev_attr_store+0x10/0x10
[ 1591.534474]  internal_create_group+0x662/0xeb0
[ 1591.534499]  ? __pfx_internal_create_group+0x10/0x10
[ 1591.534517]  ? blk_validate_limits+0xc27/0x15c0
[ 1591.534546]  ? lock_is_held_type+0x9e/0x120
[ 1591.534573]  loop_configure+0xc46/0x15a0
[ 1591.534616]  ? __pfx_loop_configure+0x10/0x10
[ 1591.534653]  ? avc_has_extended_perms+0x107/0xf20
[ 1591.534679]  ? find_held_lock+0x2b/0x80
[ 1591.534694]  ? avc_has_extended_perms+0x23b/0xf20
[ 1591.534718]  ? lock_release+0xc8/0x270
[ 1591.534741]  lo_ioctl+0x66d/0x1ca0
[ 1591.534769]  ? __pfx_lo_ioctl+0x10/0x10
[ 1591.534794]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1591.534823]  ? lock_acquire+0x15e/0x2d0
[ 1591.534843]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1591.534864]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1591.534890]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1591.534912]  ? lock_release+0xc8/0x270
[ 1591.534936]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1591.534990]  ? check_irq_usage+0x210/0xb40
[ 1591.535010]  ? __fget_files+0x34/0x3b0
[ 1591.535032]  ? find_held_lock+0x2b/0x80
[ 1591.535048]  ? __fget_files+0x203/0x3b0
[ 1591.535074]  ? __pfx_lo_ioctl+0x10/0x10
[ 1591.535098]  blkdev_ioctl+0x365/0x6d0
[ 1591.535124]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1591.535150]  ? selinux_file_ioctl+0xb9/0x280
[ 1591.535171]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1591.535197]  __x64_sys_ioctl+0x18f/0x210
[ 1591.535218]  do_syscall_64+0xbf/0x420
[ 1591.535236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1591.535254] RIP: 0033:0x7f73dfd328d7
[ 1591.535268] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1591.535284] RSP: 002b:00007f73dd2a7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1591.535301] RAX: ffffffffffffffda RBX: 00007f73dfd7c970 RCX: 00007f73dfd328d7
[ 1591.535312] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1591.535322] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1591.535332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1591.535342] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1591.535364]  </TASK>
[ 1591.564434] FAULT_INJECTION: forcing a failure.
[ 1591.564434] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1591.565374] No source specified
[ 1591.566474] CPU: 0 UID: 0 PID: 11594 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1591.566509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1591.566524] Call Trace:
[ 1591.566533]  <TASK>
[ 1591.566542]  dump_stack_lvl+0xfa/0x120
[ 1591.566589]  should_fail_ex+0x4d7/0x5e0
[ 1591.566623]  _copy_to_iter+0x578/0x1660
[ 1591.566654]  ? find_held_lock+0x2b/0x80
[ 1591.566682]  ? __pfx__copy_to_iter+0x10/0x10
[ 1591.566713]  ? __virt_addr_valid+0x100/0x5d0
[ 1591.566743]  ? __check_object_size+0x5b3/0x980
[ 1591.566778]  seq_read_iter+0xdd2/0x1320
[ 1591.566821]  seq_read+0x375/0x540
[ 1591.566849]  ? __pfx_seq_read+0x10/0x10
[ 1591.566878]  ? ext4_fc_del+0x201/0x8d0
[ 1591.566905]  ? iov_iter_init+0x49/0x1c0
[ 1591.566933]  ? avc_policy_seqno+0x9/0x20
[ 1591.566976]  ? selinux_file_permission+0x99/0x600
[ 1591.567009]  ? __pfx_seq_read+0x10/0x10
[ 1591.567038]  proc_reg_read+0x120/0x310
[ 1591.567071]  ? __pfx_proc_reg_read+0x10/0x10
[ 1591.567099]  vfs_readv+0x612/0x7f0
[ 1591.567134]  ? __pfx_vfs_readv+0x10/0x10
[ 1591.567160]  ? find_held_lock+0x2b/0x80
[ 1591.567189]  ? __fget_files+0x34/0x3b0
[ 1591.567221]  ? find_held_lock+0x2b/0x80
[ 1591.567246]  ? lock_release+0xc8/0x270
[ 1591.567282]  ? __fget_files+0x20d/0x3b0
[ 1591.567323]  do_preadv+0x1ab/0x280
[ 1591.567352]  ? __pfx_do_preadv+0x10/0x10
[ 1591.567377]  ? irqentry_exit+0xee/0x650
[ 1591.567414]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1591.567449]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1591.567489]  do_syscall_64+0xbf/0x420
[ 1591.567515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1591.567540] RIP: 0033:0x7f26795c2b19
[ 1591.567560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1591.567584] RSP: 002b:00007f2676b38188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1591.567609] RAX: ffffffffffffffda RBX: 00007f26796d5f60 RCX: 00007f26795c2b19
[ 1591.567626] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000004
[ 1591.567641] RBP: 00007f2676b381d0 R08: 0000000000000000 R09: 0000000000000000
[ 1591.567656] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001
[ 1591.567671] R13: 00007ffd5e44c26f R14: 00007f2676b38300 R15: 0000000000022000
[ 1591.567703]  </TASK>
[ 1591.570226] FAULT_INJECTION: forcing a failure.
[ 1591.570226] name failslab, interval 1, probability 0, space 0, times 0
[ 1591.578773] loop5: detected capacity change from 0 to 512
[ 1591.579250] CPU: 0 UID: 0 PID: 11597 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1591.579283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1591.579297] Call Trace:
[ 1591.579306]  <TASK>
[ 1591.579316]  dump_stack_lvl+0xfa/0x120
[ 1591.579356]  should_fail_ex+0x4d7/0x5e0
[ 1591.579385]  ? security_inode_alloc+0x3e/0x130
[ 1591.579413]  should_failslab+0xc2/0x120
[ 1591.579449]  kmem_cache_alloc_noprof+0x80/0x710
[ 1591.579475]  ? __pfx_map_id_range_down+0x10/0x10
[ 1591.579512]  ? __create_object+0x59/0x80
[ 1591.579539]  ? security_inode_alloc+0x3e/0x130
[ 1591.579568]  security_inode_alloc+0x3e/0x130
[ 1591.579598]  inode_init_always_gfp+0xc9d/0xff0
20:57:55 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000013e00))

[ 1591.579636]  alloc_inode+0x8d/0x250
[ 1591.579659]  new_inode+0x1e/0x160
[ 1591.579684]  __shmem_get_inode+0x17c/0xe80
[ 1591.579722]  __shmem_file_setup+0x108/0x370
[ 1591.579757]  __do_sys_memfd_create+0x2ce/0xaa0
[ 1591.579785]  ? ksys_write+0x1a3/0x240
[ 1591.579815]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1591.579841]  ? irqentry_exit+0xee/0x650
[ 1591.579875]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1591.579907]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1591.579946]  do_syscall_64+0xbf/0x420
[ 1591.579980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1591.580003] RIP: 0033:0x7fedf4849b19
[ 1591.580022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1591.580045] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1591.580067] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4849b19
[ 1591.580084] RDX: 0000000000008400 RSI: 0000000000000000 RDI: 00007fedf48a30fb
[ 1591.580099] RBP: 0000000000000003 R08: 0000000000004200 R09: ffffffffffffffff
[ 1591.580114] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1591.580129] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00
[ 1591.580160]  </TASK>
[ 1591.592470] EXT4-fs (loop4): inodes count not valid: 294944 vs 32
[ 1591.598609] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1591.612521] EXT4-fs (loop1): group descriptors corrupted!
[ 1591.627314] No source specified
[ 1591.638010] loop4: detected capacity change from 0 to 4132
[ 1591.638288] loop1: detected capacity change from 0 to 4132
20:57:55 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00))

[ 1591.656782] EXT4-fs (loop4): inodes count not valid: 294944 vs 32
[ 1591.658416] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1591.659285] EXT4-fs (loop1): group descriptors corrupted!
20:57:55 executing program 0:
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

[ 1591.665582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1591.683224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:57:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 34)

20:57:55 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 7)

[ 1591.720684] loop5: detected capacity change from 0 to 512
[ 1591.730754] loop2: detected capacity change from 0 to 4
[ 1591.736489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1591.740535] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (1 blocks)
[ 1591.768883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:57:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 35)

20:57:55 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc003, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1591.829886] loop5: detected capacity change from 0 to 512
[ 1591.831916] loop3: detected capacity change from 0 to 512
[ 1591.871833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1591.897512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1591.915211] loop1: detected capacity change from 0 to 4132
[ 1591.915513] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1591.920813] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1591.921700] EXT4-fs (loop1): group descriptors corrupted!
[ 1591.933419] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1591.934456] EXT4-fs (loop1): group descriptors corrupted!
[ 1591.973364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:58:04 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x0) (fail_nth: 5)

20:58:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200005000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:04 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00))

20:58:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 8)

20:58:04 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:58:04 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:04 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 36)

20:58:04 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1d, &(0x7f0000000640)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37303334343838373800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000004fe17b6ecf5c42eb82d5ba1095ba954b010000000c00000000000000d0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000000900)="ffffffffff070000000000000000000000000000000000000000000000000080fffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff01000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d0f4655fd0f4655fd0f4655f000000000000000000000000fdf76b09fddea28c8504eb9482e91e42696ddce460f92e2d06a95f4f85be34971b3d1da672c2352f9d12a289479921c05229cfa46b703ab7104405a4d92debd407fcf43d66234ce562bae09dd42bd2f53e172286e2790ce33bcad666db341bd88fe7d3dc7bcbb03b4d95b9a8650276dfd0cca476828168857b85c3230f69", 0x89e, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f00000000000004000200000000000000050000001500"/64, 0x40, 0x1603}, {&(0x7f0000010f00)="200000008cb1c9158cb1c91500000000d0f4655f00"/32, 0x20, 0x1680}, {&(0x7f0000011000)="c0410000002c0000d0f4655fd0f4655fd0f4655f0000000000000200160000000000000000000000160000001700000018000000190000001a0000001b0000001c0000001d0000001e0000001f00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2800}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2a00}, {&(0x7f0000011200)="ed8100001a040000d1f4655fd1f4655fd1f4655f000000000000010004000000000000000100000021000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099aa5620000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011300)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3730333434383837382f66696c65302f66696c653000000000000000000000000000000000000000000000927823d7000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xa0, 0x2e00}, {&(0x7f0000011400)="ed8100000a000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d3d99ad000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3000}, {&(0x7f0000011500)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d1f4655fd1f4655fd1f4655f0000000000000200120000000000000001000000230000002400000025000000260000002700000028000000290000002a0000002b0000000000000000000000000000000000000000000000000000004e2ca332000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xc0, 0x31e0}, {&(0x7f0000011600)="ed81000064000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cfef66502000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x3400}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x35c0}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x5400}, {&(0x7f00000001c0)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x5800}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x5bff}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x6400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x6800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x6c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x7000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x7400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x7800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x7c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0x8000}, {&(0x7f0000012400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8400}], 0x0, &(0x7f00000005c0)={[], [{@euid_eq={'euid', 0x3d, r1}}, {@euid_gt={'euid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}]})
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000)
statx(r2, &(0x7f0000000140)='./file0\x00', 0x6000, 0x20, &(0x7f00000004c0))

[ 1600.683600] set_capacity_and_notify: 1 callbacks suppressed
[ 1600.683622] loop5: detected capacity change from 0 to 512
[ 1600.687843] loop4: detected capacity change from 0 to 4132
[ 1600.701331] EXT4-fs (loop4): inodes count not valid: 327712 vs 32
[ 1600.716570] loop4: detected capacity change from 0 to 4132
[ 1600.723517] EXT4-fs (loop4): inodes count not valid: 327712 vs 32
[ 1600.724830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1600.728581] loop2: detected capacity change from 0 to 4
[ 1600.743237] loop1: detected capacity change from 0 to 4132
[ 1600.751321] FAULT_INJECTION: forcing a failure.
[ 1600.751321] name failslab, interval 1, probability 0, space 0, times 0
[ 1600.752999] CPU: 0 UID: 0 PID: 11642 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1600.753028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1600.753041] Call Trace:
[ 1600.753049]  <TASK>
[ 1600.753058]  dump_stack_lvl+0xfa/0x120
[ 1600.753100]  should_fail_ex+0x4d7/0x5e0
[ 1600.753130]  ? __d_alloc+0x34/0xa10
[ 1600.753159]  should_failslab+0xc2/0x120
[ 1600.753191]  kmem_cache_alloc_lru_noprof+0x84/0x720
[ 1600.753214]  ? find_held_lock+0x2b/0x80
[ 1600.753243]  ? __d_alloc+0x34/0xa10
[ 1600.753271]  __d_alloc+0x34/0xa10
[ 1600.753301]  ? mpol_shared_policy_init+0x24f/0x390
[ 1600.753331]  d_alloc_pseudo+0x1d/0xc0
[ 1600.753355]  alloc_file_pseudo+0xbe/0x220
[ 1600.753391]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1600.753425]  ? __shmem_get_inode+0x684/0xe80
[ 1600.753459]  __shmem_file_setup+0x1a8/0x370
[ 1600.753491]  __do_sys_memfd_create+0x2ce/0xaa0
[ 1600.753516]  ? ksys_write+0x1a3/0x240
[ 1600.753543]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1600.753567]  ? irqentry_exit+0xee/0x650
[ 1600.753599]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1600.753629]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1600.753665]  do_syscall_64+0xbf/0x420
[ 1600.753689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1600.753712] RIP: 0033:0x7fedf4849b19
[ 1600.753729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1600.753751] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1600.753772] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4849b19
[ 1600.753787] RDX: 0000000000008400 RSI: 0000000000000000 RDI: 00007fedf48a30fb
[ 1600.753801] RBP: 0000000000000003 R08: 0000000000004200 R09: ffffffffffffffff
[ 1600.753814] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1600.753827] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00
[ 1600.753869]  </TASK>
[ 1600.781822] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1600.783350] EXT4-fs (loop1): group descriptors corrupted!
[ 1600.789373] FAULT_INJECTION: forcing a failure.
[ 1600.789373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1600.791404] CPU: 1 UID: 0 PID: 11645 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1600.791434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1600.791447] Call Trace:
[ 1600.791455]  <TASK>
[ 1600.791463]  dump_stack_lvl+0xfa/0x120
[ 1600.791506]  should_fail_ex+0x4d7/0x5e0
[ 1600.791536]  _copy_to_user+0x32/0xd0
[ 1600.791564]  simple_read_from_buffer+0xe0/0x180
[ 1600.791594]  proc_fail_nth_read+0x18a/0x240
[ 1600.791630]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1600.791664]  ? security_file_permission+0x22/0x90
[ 1600.791697]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1600.791731]  vfs_read+0x1eb/0xc70
[ 1600.791761]  ? __pfx___mutex_lock+0x10/0x10
[ 1600.791781]  ? __fget_files+0x34/0x3b0
[ 1600.791810]  ? __pfx_vfs_read+0x10/0x10
[ 1600.791838]  ? lock_release+0xc8/0x270
[ 1600.791871]  ? __fget_files+0x20d/0x3b0
[ 1600.791908]  ksys_read+0x121/0x240
[ 1600.791935]  ? __pfx_ksys_read+0x10/0x10
[ 1600.791978]  do_syscall_64+0xbf/0x420
[ 1600.792003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1600.792026] RIP: 0033:0x7f267957569c
[ 1600.792044] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1600.792065] RSP: 002b:00007f2676b38170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1600.792087] RAX: ffffffffffffffda RBX: 00000000000000dc RCX: 00007f267957569c
[ 1600.792102] RDX: 000000000000000f RSI: 00007f2676b381e0 RDI: 0000000000000005
[ 1600.792115] RBP: 00007f2676b381d0 R08: 0000000000000000 R09: 0000000000000000
[ 1600.792129] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001
[ 1600.792142] R13: 00007ffd5e44c26f R14: 00007f2676b38300 R15: 0000000000022000
[ 1600.792170]  </TASK>
[ 1600.828831] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (1 blocks)
[ 1600.832655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1600.840624] loop4: detected capacity change from 0 to 4132
[ 1600.845926] EXT4-fs (loop4): inodes count not valid: 393248 vs 32
[ 1600.850139] loop4: detected capacity change from 0 to 4132
[ 1600.856125] EXT4-fs (loop4): inodes count not valid: 393248 vs 32
[ 1600.857696] loop1: detected capacity change from 0 to 4132
[ 1600.886031] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1600.887514] EXT4-fs (loop1): group descriptors corrupted!
20:58:04 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 37)

20:58:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200006000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:05 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x0)

[ 1600.951375] FAULT_INJECTION: forcing a failure.
20:58:05 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 9)

20:58:05 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200007000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1600.951375] name failslab, interval 1, probability 0, space 0, times 0
[ 1600.953354] CPU: 0 UID: 0 PID: 11650 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1600.953384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1600.953398] Call Trace:
[ 1600.953406]  <TASK>
[ 1600.953414]  dump_stack_lvl+0xfa/0x120
[ 1600.953456]  should_fail_ex+0x4d7/0x5e0
[ 1600.953486]  ? __kernfs_new_node+0xd3/0x930
[ 1600.953508]  should_failslab+0xc2/0x120
[ 1600.953540]  kmem_cache_alloc_noprof+0x80/0x710
[ 1600.953572]  ? __kernfs_new_node+0xd3/0x930
[ 1600.953593]  __kernfs_new_node+0xd3/0x930
[ 1600.953621]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1600.953649]  ? lock_acquire+0x15e/0x2d0
[ 1600.953677]  ? kernfs_root+0x23/0x2a0
[ 1600.953699]  ? find_held_lock+0x2b/0x80
[ 1600.953722]  ? kernfs_root+0xee/0x2a0
[ 1600.953745]  ? lock_release+0xc8/0x270
[ 1600.953772]  ? lock_is_held_type+0x9e/0x120
[ 1600.953812]  kernfs_new_node+0x13c/0x1e0
[ 1600.953843]  __kernfs_create_file+0x55/0x360
[ 1600.953907]  sysfs_add_file_mode_ns+0x21c/0x430
[ 1600.953943]  ? __pfx_dev_attr_store+0x10/0x10
[ 1600.954003]  internal_create_group+0x662/0xeb0
[ 1600.954036]  ? __pfx_internal_create_group+0x10/0x10
[ 1600.954059]  ? blk_validate_limits+0xc27/0x15c0
[ 1600.954097]  ? lock_is_held_type+0x9e/0x120
[ 1600.954132]  loop_configure+0xc46/0x15a0
[ 1600.954188]  ? __pfx_loop_configure+0x10/0x10
[ 1600.954236]  ? avc_has_extended_perms+0x107/0xf20
[ 1600.954268]  ? find_held_lock+0x2b/0x80
[ 1600.954288]  ? avc_has_extended_perms+0x23b/0xf20
[ 1600.954320]  ? lock_release+0xc8/0x270
[ 1600.954351]  lo_ioctl+0x66d/0x1ca0
[ 1600.954388]  ? __pfx_lo_ioctl+0x10/0x10
[ 1600.954420]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1600.954458]  ? lock_acquire+0x15e/0x2d0
[ 1600.954485]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1600.954512]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1600.954545]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1600.954576]  ? lock_release+0xc8/0x270
[ 1600.954607]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1600.954670]  ? check_irq_usage+0x210/0xb40
[ 1600.954696]  ? __fget_files+0x34/0x3b0
[ 1600.954724]  ? find_held_lock+0x2b/0x80
[ 1600.954744]  ? __fget_files+0x203/0x3b0
[ 1600.954774]  ? __pfx_lo_ioctl+0x10/0x10
[ 1600.954806]  blkdev_ioctl+0x365/0x6d0
[ 1600.954841]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1600.954874]  ? selinux_file_ioctl+0xb9/0x280
[ 1600.954903]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1600.954938]  __x64_sys_ioctl+0x18f/0x210
[ 1600.954965]  do_syscall_64+0xbf/0x420
[ 1600.954992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1600.955016] RIP: 0033:0x7f73dfd328d7
[ 1600.955033] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1600.955055] RSP: 002b:00007f73dd2a7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1600.955076] RAX: ffffffffffffffda RBX: 00007f73dfd7c970 RCX: 00007f73dfd328d7
[ 1600.955091] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1600.955104] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1600.955118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1600.955130] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1600.955159]  </TASK>
[ 1601.017706] loop4: detected capacity change from 0 to 4132
[ 1601.023618] loop3: detected capacity change from 0 to 512
[ 1601.055164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1601.056556] EXT4-fs (loop4): inodes count not valid: 458784 vs 32
[ 1601.097636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1601.168886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1601.208551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:58:13 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 10)

20:58:13 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000b000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:13 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:13 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:58:13 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00))

20:58:13 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x3b}, {0x0}], 0x2, 0x600, 0x0)

20:58:13 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 38)

20:58:13 executing program 7:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/meminfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2d000000a670fb11fca714d9abae8f20b314bc446c43633798dfcb21206a8155b793e0f740a10500000000000000b24b9ae3801d7ea7eb2db0311562b5afd816a1d8", @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25860000000800a100ff7f0000000026006c090000050018010d000008"], 0x2c}, 0x1, 0x0, 0x0, 0x20020802}, 0x24004080)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
getdents(r1, &(0x7f00000003c0)=""/88, 0x58)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)

[ 1609.703902] set_capacity_and_notify: 1 callbacks suppressed
[ 1609.703918] loop5: detected capacity change from 0 to 512
[ 1609.705553] loop1: detected capacity change from 0 to 4132
[ 1609.710683] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1609.711496] EXT4-fs (loop1): group descriptors corrupted!
[ 1609.721496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1609.723570] loop4: detected capacity change from 0 to 4132
[ 1609.724387] loop1: detected capacity change from 0 to 4132
[ 1609.731204] loop2: detected capacity change from 0 to 4
[ 1609.732440] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1609.733303] EXT4-fs (loop1): group descriptors corrupted!
[ 1609.739510] FAULT_INJECTION: forcing a failure.
[ 1609.739510] name failslab, interval 1, probability 0, space 0, times 0
[ 1609.740443] CPU: 1 UID: 0 PID: 11682 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1609.740460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1609.740468] Call Trace:
[ 1609.740472]  <TASK>
[ 1609.740478]  dump_stack_lvl+0xfa/0x120
[ 1609.740504]  should_fail_ex+0x4d7/0x5e0
[ 1609.740522]  ? alloc_empty_file+0x58/0x1e0
[ 1609.740542]  should_failslab+0xc2/0x120
[ 1609.740560]  kmem_cache_alloc_noprof+0x80/0x710
[ 1609.740574]  ? d_instantiate+0x92/0xb0
[ 1609.740596]  ? alloc_empty_file+0x58/0x1e0
[ 1609.740613]  ? _raw_spin_unlock+0x1e/0x40
[ 1609.740628]  alloc_empty_file+0x58/0x1e0
[ 1609.740648]  alloc_file_pseudo+0x12b/0x220
[ 1609.740667]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1609.740690]  __shmem_file_setup+0x1a8/0x370
[ 1609.740710]  __do_sys_memfd_create+0x2ce/0xaa0
[ 1609.740726]  ? ksys_write+0x1a3/0x240
[ 1609.740740]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1609.740754]  ? irqentry_exit+0xee/0x650
[ 1609.740773]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1609.740791]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1609.740812]  do_syscall_64+0xbf/0x420
[ 1609.740825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1609.740838] RIP: 0033:0x7fedf4849b19
[ 1609.740849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1609.740861] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1609.740874] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4849b19
[ 1609.740882] RDX: 0000000000008400 RSI: 0000000000000000 RDI: 00007fedf48a30fb
[ 1609.740890] RBP: 0000000000000003 R08: 0000000000004200 R09: ffffffffffffffff
[ 1609.740898] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1609.740906] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00
[ 1609.740921]  </TASK>
[ 1609.757826] EXT4-fs (loop4): inodes count not valid: 720928 vs 32
[ 1609.787669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:58:13 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf500, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:13 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 39)

[ 1609.798828] loop4: detected capacity change from 0 to 4132
20:58:13 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 11)

[ 1609.823386] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (1 blocks)
[ 1609.828182] EXT4-fs (loop4): inodes count not valid: 720928 vs 32
20:58:13 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:58:13 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {0x0}], 0x2, 0x600, 0x0)

20:58:13 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef01", 0x3b, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00)=ANY=[])
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v1={0x1000000, [{0x2, 0xffffffff}]}, 0xc, 0x0)

[ 1609.871074] loop1: detected capacity change from 0 to 4132
[ 1609.883173] loop3: detected capacity change from 0 to 512
[ 1609.889724] FAULT_INJECTION: forcing a failure.
[ 1609.889724] name failslab, interval 1, probability 0, space 0, times 0
[ 1609.891454] CPU: 0 UID: 0 PID: 11694 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1609.891485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1609.891498] Call Trace:
[ 1609.891505]  <TASK>
[ 1609.891514]  dump_stack_lvl+0xfa/0x120
[ 1609.891556]  should_fail_ex+0x4d7/0x5e0
[ 1609.891586]  ? __kernfs_new_node+0xd3/0x930
[ 1609.891609]  should_failslab+0xc2/0x120
[ 1609.891640]  kmem_cache_alloc_noprof+0x80/0x710
[ 1609.891671]  ? __kernfs_new_node+0xd3/0x930
[ 1609.891692]  __kernfs_new_node+0xd3/0x930
[ 1609.891719]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1609.891746]  ? lock_acquire+0x15e/0x2d0
[ 1609.891775]  ? kernfs_root+0x23/0x2a0
[ 1609.891797]  ? find_held_lock+0x2b/0x80
[ 1609.891821]  ? kernfs_root+0xee/0x2a0
[ 1609.891846]  ? lock_release+0xc8/0x270
[ 1609.891872]  ? lock_is_held_type+0x9e/0x120
[ 1609.891912]  kernfs_new_node+0x13c/0x1e0
[ 1609.891945]  __kernfs_create_file+0x55/0x360
[ 1609.891989]  sysfs_add_file_mode_ns+0x21c/0x430
[ 1609.892014]  ? __pfx_dev_attr_store+0x10/0x10
[ 1609.892052]  internal_create_group+0x662/0xeb0
[ 1609.892086]  ? __pfx_internal_create_group+0x10/0x10
[ 1609.892110]  ? blk_validate_limits+0xc27/0x15c0
[ 1609.892147]  ? lock_is_held_type+0x9e/0x120
[ 1609.892183]  loop_configure+0xc46/0x15a0
[ 1609.892238]  ? __pfx_loop_configure+0x10/0x10
[ 1609.892286]  ? avc_has_extended_perms+0x107/0xf20
[ 1609.892319]  ? find_held_lock+0x2b/0x80
[ 1609.892339]  ? avc_has_extended_perms+0x23b/0xf20
[ 1609.892371]  ? lock_release+0xc8/0x270
[ 1609.892401]  lo_ioctl+0x66d/0x1ca0
[ 1609.892439]  ? __pfx_lo_ioctl+0x10/0x10
[ 1609.892471]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1609.892509]  ? lock_acquire+0x15e/0x2d0
[ 1609.892536]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1609.892563]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1609.892596]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1609.892626]  ? lock_release+0xc8/0x270
[ 1609.892657]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1609.892720]  ? check_irq_usage+0x210/0xb40
[ 1609.892745]  ? __fget_files+0x34/0x3b0
[ 1609.892774]  ? find_held_lock+0x2b/0x80
[ 1609.892794]  ? __fget_files+0x203/0x3b0
[ 1609.892823]  ? __pfx_lo_ioctl+0x10/0x10
[ 1609.892855]  blkdev_ioctl+0x365/0x6d0
[ 1609.892890]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1609.892924]  ? selinux_file_ioctl+0xb9/0x280
[ 1609.892951]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1609.892987]  __x64_sys_ioctl+0x18f/0x210
[ 1609.893015]  do_syscall_64+0xbf/0x420
[ 1609.893040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1609.893063] RIP: 0033:0x7f73dfd328d7
[ 1609.893081] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1609.893104] RSP: 002b:00007f73dd2a7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1609.893128] RAX: ffffffffffffffda RBX: 00007f73dfd7c970 RCX: 00007f73dfd328d7
[ 1609.893144] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1609.893157] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1609.893171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1609.893185] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1609.893214]  </TASK>
20:58:13 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0}], 0x0, &(0x7f0000013e00))

20:58:14 executing program 0:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

[ 1609.960056] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1609.961514] EXT4-fs (loop1): group descriptors corrupted!
[ 1609.971793] loop2: detected capacity change from 0 to 4
20:58:14 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200018000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1609.988777] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (1 blocks)
[ 1610.003896] loop1: detected capacity change from 0 to 4132
[ 1610.020890] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1610.022529] EXT4-fs (loop1): group descriptors corrupted!
20:58:14 executing program 0:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

[ 1610.036014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
20:58:14 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0}], 0x0, &(0x7f0000013e00))

[ 1610.075815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1610.080517] EXT4-fs (loop4): inodes count not valid: 1572896 vs 32
[ 1610.094709] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (1 blocks)
[ 1610.096006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1610.113721] EXT4-fs (loop4): inodes count not valid: 1572896 vs 32
[ 1610.158928] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:58:22 executing program 0:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:58:22 executing program 7:
uname(&(0x7f0000000400))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = io_uring_setup(0x358e, &(0x7f0000000000)={0x0, 0x3124, 0x4, 0x0, 0x248})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
pread64(r2, &(0x7f00000000c0)=""/33, 0x42, 0x200)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r1, r1, r3, r0, r1, r0, r0, 0xffffffffffffffff], 0x8)
r4 = io_uring_setup(0x5732, &(0x7f0000000000)={0x0, 0x80003124, 0x4, 0x0, 0x248})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8001, @empty, 0x488f}, 0xffffffffffffff7e)
pread64(r6, &(0x7f00000000c0)=""/33, 0x21, 0x200)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$int_out(r2, 0x2, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000080)=[r5, r5, r7, r4, r5, r4, r4, 0xffffffffffffffff], 0x8)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000002c0)={{r7}, "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"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

20:58:22 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 12)

20:58:22 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20001c000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 40)

20:58:22 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x2}], 0x2, 0x600, 0x0)

20:58:22 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:22 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0}], 0x0, &(0x7f0000013e00))

[ 1618.838270] set_capacity_and_notify: 4 callbacks suppressed
[ 1618.838285] loop1: detected capacity change from 0 to 4132
[ 1618.841559] loop2: detected capacity change from 0 to 4
[ 1618.844135] loop5: detected capacity change from 0 to 512
[ 1618.851341] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (1 blocks)
[ 1618.853899] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1618.854774] EXT4-fs (loop1): group descriptors corrupted!
[ 1618.866421] loop4: detected capacity change from 0 to 4132
[ 1618.867329] FAULT_INJECTION: forcing a failure.
[ 1618.867329] name failslab, interval 1, probability 0, space 0, times 0
[ 1618.869410] CPU: 0 UID: 0 PID: 11737 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1618.869446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1618.869462] Call Trace:
[ 1618.869471]  <TASK>
[ 1618.869481]  dump_stack_lvl+0xfa/0x120
[ 1618.869531]  should_fail_ex+0x4d7/0x5e0
[ 1618.869565]  ? security_file_alloc+0x35/0x130
[ 1618.869601]  should_failslab+0xc2/0x120
[ 1618.869639]  kmem_cache_alloc_noprof+0x80/0x710
[ 1618.869668]  ? __create_object+0x59/0x80
[ 1618.869700]  ? security_file_alloc+0x35/0x130
[ 1618.869735]  security_file_alloc+0x35/0x130
[ 1618.869771]  init_file+0x95/0x4c0
[ 1618.869812]  alloc_empty_file+0x76/0x1e0
[ 1618.869855]  alloc_file_pseudo+0x12b/0x220
[ 1618.869898]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1618.869971]  __shmem_file_setup+0x1a8/0x370
[ 1618.870011]  __do_sys_memfd_create+0x2ce/0xaa0
[ 1618.870050] loop1: detected capacity change from 0 to 4132
[ 1618.870042]  ? ksys_write+0x1a3/0x240
[ 1618.870077]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1618.870106]  ? irqentry_exit+0xee/0x650
[ 1618.870147]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1618.870184]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1618.870229]  do_syscall_64+0xbf/0x420
[ 1618.870258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1618.870285] RIP: 0033:0x7fedf4849b19
[ 1618.870306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1618.870332] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1618.870358] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4849b19
[ 1618.870376] RDX: 0000000000008400 RSI: 0000000000000000 RDI: 00007fedf48a30fb
[ 1618.870393] RBP: 0000000000000003 R08: 0000000000004200 R09: ffffffffffffffff
[ 1618.870410] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1618.870427] R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020013a00
[ 1618.870461]  </TASK>
[ 1618.891382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1618.901516] EXT4-fs (loop4): inodes count not valid: 1835040 vs 32
[ 1618.913290] loop4: detected capacity change from 0 to 4132
[ 1618.916341] EXT4-fs (loop4): inodes count not valid: 1835040 vs 32
20:58:23 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x3}], 0x2, 0x600, 0x0)

20:58:23 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 13)

[ 1618.945792] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1618.947542] EXT4-fs (loop1): group descriptors corrupted!
20:58:23 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:23 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xff0f, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:23 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

[ 1618.994601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:58:23 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 41)

20:58:23 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200020000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1619.044265] loop5: detected capacity change from 0 to 512
[ 1619.054166] loop3: detected capacity change from 0 to 512
[ 1619.059124] loop2: detected capacity change from 0 to 4132
[ 1619.066864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1619.067603] loop4: detected capacity change from 0 to 4132
[ 1619.079020] EXT4-fs (loop2): unsupported descriptor size 0
[ 1619.081568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1619.082905] EXT4-fs (loop4): inodes count not valid: 2097184 vs 32
[ 1619.087096] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1619.087865] EXT4-fs (loop1): group descriptors corrupted!
20:58:23 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

[ 1619.110576] EXT4-fs (loop4): inodes count not valid: 2097184 vs 32
20:58:23 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x4}], 0x2, 0x600, 0x0)

[ 1619.132767] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1619.134371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1619.135920] EXT4-fs (loop1): group descriptors corrupted!
20:58:23 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 42)

20:58:23 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 14)

[ 1619.148510] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:58:23 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:23 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffe, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:23 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200040000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1619.228784] FAULT_INJECTION: forcing a failure.
[ 1619.228784] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1619.229809] CPU: 1 UID: 0 PID: 11769 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1619.229826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1619.229834] Call Trace:
[ 1619.229838]  <TASK>
[ 1619.229843]  dump_stack_lvl+0xfa/0x120
[ 1619.229869]  should_fail_ex+0x4d7/0x5e0
[ 1619.229887]  should_fail_alloc_page+0xe0/0x110
[ 1619.229907]  prepare_alloc_pages+0x1eb/0x550
[ 1619.229927]  __alloc_frozen_pages_noprof+0x17f/0x2000
[ 1619.229953]  ? __is_insn_slot_addr+0x2e/0x290
[ 1619.229972]  ? __is_insn_slot_addr+0x136/0x290
[ 1619.229986]  ? lock_release+0xc8/0x270
[ 1619.230007]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1619.230028]  ? __lock_acquire+0x453/0x2150
[ 1619.230046]  ? lock_is_held_type+0x9e/0x120
[ 1619.230067]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1619.230088]  ? policy_nodemask+0xeb/0x4e0
[ 1619.230103]  alloc_pages_mpol+0xed/0x340
[ 1619.230116]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1619.230127]  ? filemap_get_entry+0x1bb/0x3b0
[ 1619.230145]  ? __pfx_filemap_get_entry+0x10/0x10
[ 1619.230166]  folio_alloc_mpol_noprof+0x38/0xa0
[ 1619.230181]  shmem_alloc_folio+0x11b/0x140
[ 1619.230197]  shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
[ 1619.230220]  ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10
[ 1619.230240]  ? _raw_read_unlock+0x1e/0x40
[ 1619.230257]  ? simple_xattr_get+0x173/0x1d0
[ 1619.230279]  shmem_write_begin+0x194/0x3b0
[ 1619.230296]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1619.230312]  ? mark_held_locks+0x49/0x80
[ 1619.230327]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1619.230340]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1619.230355]  ? ktime_get_coarse_real_ts64_mg+0x213/0x2a0
[ 1619.230377]  generic_perform_write+0x391/0x810
[ 1619.230397]  ? __pfx_generic_perform_write+0x10/0x10
[ 1619.230415]  ? file_update_time_flags+0x24c/0x4f0
[ 1619.230436]  shmem_file_write_iter+0x111/0x140
[ 1619.230452]  vfs_write+0xbe9/0x1150
[ 1619.230468]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1619.230482]  ? __fget_files+0x34/0x3b0
[ 1619.230497]  ? __pfx_vfs_write+0x10/0x10
[ 1619.230522]  __x64_sys_pwrite64+0x1f1/0x260
[ 1619.230538]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1619.230559]  do_syscall_64+0xbf/0x420
[ 1619.230572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1619.230585] RIP: 0033:0x7fedf47fcab7
[ 1619.230595] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1619.230607] RSP: 002b:00007fedf1dbef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1619.230619] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf47fcab7
[ 1619.230627] RDX: 000000000000005d RSI: 0000000020010000 RDI: 0000000000000004
[ 1619.230634] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1619.230642] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004
[ 1619.230649] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
[ 1619.230664]  </TASK>
[ 1619.268001] EXT4-fs (loop4): inodes count not valid: 4194336 vs 32
[ 1619.271647] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1619.272495] EXT4-fs (loop1): group descriptors corrupted!
[ 1619.278153] EXT4-fs (loop2): unsupported descriptor size 0
[ 1619.292760] EXT4-fs (loop4): inodes count not valid: 4194336 vs 32
[ 1619.293463] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[ 1619.318425] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1619.319249] EXT4-fs (loop1): group descriptors corrupted!
[ 1619.373266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1619.405809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:58:32 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 43)

20:58:32 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1e4c2, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200064000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:32 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x5}], 0x2, 0x600, 0x0)

20:58:32 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 15)

20:58:32 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:32 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

20:58:32 executing program 7:
uname(&(0x7f0000000400))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = io_uring_setup(0x358e, &(0x7f0000000000)={0x0, 0x3124, 0x4, 0x0, 0x248})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
pread64(r2, &(0x7f00000000c0)=""/33, 0x42, 0x200)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r1, r1, r3, r0, r1, r0, r0, 0xffffffffffffffff], 0x8)
r4 = io_uring_setup(0x5732, &(0x7f0000000000)={0x0, 0x80003124, 0x4, 0x0, 0x248})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8001, @empty, 0x488f}, 0xffffffffffffff7e)
pread64(r6, &(0x7f00000000c0)=""/33, 0x21, 0x200)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$int_out(r2, 0x2, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000080)=[r5, r5, r7, r4, r5, r4, r4, 0xffffffffffffffff], 0x8)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000002c0)={{r7}, "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"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

[ 1628.337559] set_capacity_and_notify: 10 callbacks suppressed
[ 1628.337576] loop4: detected capacity change from 0 to 4132
[ 1628.341916] FAULT_INJECTION: forcing a failure.
[ 1628.341916] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1628.342910] CPU: 1 UID: 0 PID: 11794 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1628.342926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1628.342934] Call Trace:
[ 1628.342939]  <TASK>
[ 1628.342944]  dump_stack_lvl+0xfa/0x120
[ 1628.342975]  should_fail_ex+0x4d7/0x5e0
[ 1628.342992]  ? page_copy_sane+0xce/0x2b0
[ 1628.343011]  copy_folio_from_iter_atomic+0x383/0x1820
[ 1628.343031]  ? _raw_read_unlock+0x1e/0x40
[ 1628.343049]  ? simple_xattr_get+0x173/0x1d0
[ 1628.343073]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 1628.343088]  ? shmem_write_begin+0x1ab/0x3b0
[ 1628.343108]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1628.343124]  ? mark_held_locks+0x49/0x80
[ 1628.343143]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1628.343156]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1628.343171]  ? ktime_get_coarse_real_ts64_mg+0x213/0x2a0
[ 1628.343194]  generic_perform_write+0x1d7/0x810
[ 1628.343215]  ? __pfx_generic_perform_write+0x10/0x10
[ 1628.343233]  ? file_update_time_flags+0x24c/0x4f0
[ 1628.343255]  shmem_file_write_iter+0x111/0x140
[ 1628.343271]  vfs_write+0xbe9/0x1150
[ 1628.343288]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1628.343302]  ? __fget_files+0x34/0x3b0
[ 1628.343317]  ? __pfx_vfs_write+0x10/0x10
[ 1628.343343]  __x64_sys_pwrite64+0x1f1/0x260
[ 1628.343359]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1628.343380]  do_syscall_64+0xbf/0x420
[ 1628.343394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1628.343407] RIP: 0033:0x7fedf47fcab7
[ 1628.343417] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1628.343430] RSP: 002b:00007fedf1dbef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1628.343442] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf47fcab7
[ 1628.343451] RDX: 000000000000005d RSI: 0000000020010000 RDI: 0000000000000004
[ 1628.343458] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1628.343466] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004
[ 1628.343474] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
[ 1628.343490]  </TASK>
[ 1628.367667] EXT4-fs (loop4): inodes count not valid: 6553632 vs 32
[ 1628.375595] loop2: detected capacity change from 0 to 4132
[ 1628.380287] loop1: detected capacity change from 0 to 4132
[ 1628.391469] loop4: detected capacity change from 0 to 4132
20:58:32 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x6}], 0x2, 0x600, 0x0)

[ 1628.396719] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1628.397648] EXT4-fs (loop1): group descriptors corrupted!
[ 1628.401255] EXT4-fs (loop4): inodes count not valid: 6553632 vs 32
[ 1628.402080] EXT4-fs (loop2): unsupported descriptor size 0
[ 1628.405794] loop1: detected capacity change from 0 to 4132
[ 1628.414746] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1628.415666] EXT4-fs (loop1): group descriptors corrupted!
[ 1628.419822] loop3: detected capacity change from 0 to 512
20:58:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200480000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1628.446682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
20:58:32 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

[ 1628.467930] loop5: detected capacity change from 0 to 512
[ 1628.491037] FAULT_INJECTION: forcing a failure.
[ 1628.491037] name failslab, interval 1, probability 0, space 0, times 0
[ 1628.492110] CPU: 1 UID: 0 PID: 11808 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1628.492127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1628.492135] Call Trace:
[ 1628.492140]  <TASK>
[ 1628.492145]  dump_stack_lvl+0xfa/0x120
[ 1628.492171]  should_fail_ex+0x4d7/0x5e0
[ 1628.492189]  ? kobject_uevent_env+0x22e/0xf90
[ 1628.492205]  should_failslab+0xc2/0x120
[ 1628.492223]  __kmalloc_cache_noprof+0x80/0x730
[ 1628.492244]  ? ___ratelimit+0x3c0/0x910
[ 1628.492266]  ? kobject_uevent_env+0x22e/0xf90
[ 1628.492281]  kobject_uevent_env+0x22e/0xf90
[ 1628.492300]  ? lock_is_held_type+0x9e/0x120
[ 1628.492320]  loop_configure+0xe31/0x15a0
[ 1628.492355]  ? __pfx_loop_configure+0x10/0x10
[ 1628.492380]  ? avc_has_extended_perms+0x107/0xf20
[ 1628.492400]  ? find_held_lock+0x2b/0x80
[ 1628.492414]  ? avc_has_extended_perms+0x23b/0xf20
[ 1628.492431]  ? lock_release+0xc8/0x270
[ 1628.492449]  lo_ioctl+0x66d/0x1ca0
[ 1628.492469]  ? __pfx_lo_ioctl+0x10/0x10
[ 1628.492486]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1628.492507]  ? lock_acquire+0x15e/0x2d0
[ 1628.492521]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1628.492536]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1628.492556]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1628.492573]  ? lock_release+0xc8/0x270
[ 1628.492590]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1628.492626]  ? check_irq_usage+0x210/0xb40
[ 1628.492640]  ? __fget_files+0x34/0x3b0
[ 1628.492657]  ? find_held_lock+0x2b/0x80
[ 1628.492668]  ? __fget_files+0x203/0x3b0
[ 1628.492684]  ? __pfx_lo_ioctl+0x10/0x10
[ 1628.492702]  blkdev_ioctl+0x365/0x6d0
[ 1628.492722]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1628.492740]  ? selinux_file_ioctl+0xb9/0x280
[ 1628.492756]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1628.492775]  __x64_sys_ioctl+0x18f/0x210
[ 1628.492791]  do_syscall_64+0xbf/0x420
[ 1628.492804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1628.492816] RIP: 0033:0x7f73dfd328d7
[ 1628.492827] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1628.492839] RSP: 002b:00007f73dd2a7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1628.492852] RAX: ffffffffffffffda RBX: 00007f73dfd7c970 RCX: 00007f73dfd328d7
[ 1628.492860] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1628.492868] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1628.492875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1628.492883] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1628.492900]  </TASK>
[ 1628.553009] loop4: detected capacity change from 0 to 4132
[ 1628.553530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1628.557512] EXT4-fs (loop4): inodes count not valid: 8389664 vs 32
[ 1628.558818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1628.608881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:58:43 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 44)

20:58:43 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x7}], 0x2, 0x600, 0x0)

20:58:43 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2003e8000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:43 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140))

20:58:43 executing program 7:
uname(&(0x7f0000000400))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = io_uring_setup(0x358e, &(0x7f0000000000)={0x0, 0x3124, 0x4, 0x0, 0x248})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
pread64(r2, &(0x7f00000000c0)=""/33, 0x42, 0x200)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r1, r1, r3, r0, r1, r0, r0, 0xffffffffffffffff], 0x8)
r4 = io_uring_setup(0x5732, &(0x7f0000000000)={0x0, 0x80003124, 0x4, 0x0, 0x248})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8001, @empty, 0x488f}, 0xffffffffffffff7e)
pread64(r6, &(0x7f00000000c0)=""/33, 0x21, 0x200)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$int_out(r2, 0x2, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000080)=[r5, r5, r7, r4, r5, r4, r4, 0xffffffffffffffff], 0x8)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000002c0)={{r7}, "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"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

20:58:43 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 16)

20:58:43 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:43 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1639.425423] loop4: detected capacity change from 0 to 4132
[ 1639.427162] loop2: detected capacity change from 0 to 4132
[ 1639.437672] EXT4-fs (loop4): inodes count not valid: 15205152 vs 32
[ 1639.439507] EXT4-fs (loop2): unsupported descriptor size 0
[ 1639.448515] loop5: detected capacity change from 0 to 512
[ 1639.448532] loop4: detected capacity change from 0 to 4132
[ 1639.449884] EXT4-fs (loop4): inodes count not valid: 15205152 vs 32
[ 1639.451118] loop1: detected capacity change from 0 to 4132
[ 1639.452318] FAULT_INJECTION: forcing a failure.
[ 1639.452318] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1639.454494] CPU: 0 UID: 0 PID: 11837 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1639.454530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1639.454546] Call Trace:
[ 1639.454555]  <TASK>
[ 1639.454565]  dump_stack_lvl+0xfa/0x120
[ 1639.454610]  should_fail_ex+0x4d7/0x5e0
[ 1639.454641]  should_fail_alloc_page+0xe0/0x110
[ 1639.454678]  prepare_alloc_pages+0x1eb/0x550
[ 1639.454715]  __alloc_frozen_pages_noprof+0x17f/0x2000
[ 1639.454768]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1639.454809]  ? __lock_acquire+0x453/0x2150
[ 1639.454844]  ? do_raw_spin_unlock+0x53/0x220
[ 1639.454879]  ? lock_is_held_type+0x9e/0x120
[ 1639.454917]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1639.454965]  ? policy_nodemask+0xeb/0x4e0
20:58:43 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x8}], 0x2, 0x600, 0x0)

[ 1639.454992]  alloc_pages_mpol+0xed/0x340
[ 1639.455015]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1639.455037]  ? filemap_get_entry+0x1bb/0x3b0
[ 1639.455072]  ? __pfx_filemap_get_entry+0x10/0x10
[ 1639.455113]  folio_alloc_mpol_noprof+0x38/0xa0
[ 1639.455143]  shmem_alloc_folio+0x11b/0x140
[ 1639.455174]  shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
[ 1639.455218]  ? lock_acquire+0x15e/0x2d0
[ 1639.455248]  ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10
[ 1639.455288]  ? __lock_acquire+0x453/0x2150
[ 1639.455324]  shmem_write_begin+0x194/0x3b0
[ 1639.455359]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1639.455394]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1639.455426]  generic_perform_write+0x391/0x810
[ 1639.455466]  ? __pfx_generic_perform_write+0x10/0x10
[ 1639.455497]  ? generic_update_time+0xcb/0xf0
[ 1639.455532]  ? mnt_put_write_access_file+0xb7/0xe0
[ 1639.455563]  ? file_update_time_flags+0x24c/0x4f0
[ 1639.455604]  shmem_file_write_iter+0x111/0x140
[ 1639.455634]  vfs_write+0xbe9/0x1150
[ 1639.455664]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1639.455693]  ? __fget_files+0x34/0x3b0
[ 1639.455723]  ? __pfx_vfs_write+0x10/0x10
[ 1639.455773]  __x64_sys_pwrite64+0x1f1/0x260
[ 1639.455805]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1639.455846]  do_syscall_64+0xbf/0x420
[ 1639.455871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1639.455896] RIP: 0033:0x7fedf47fcab7
[ 1639.455915] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1639.455937] RSP: 002b:00007fedf1dbef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1639.455960] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf47fcab7
[ 1639.455976] RDX: 0000000000000020 RSI: 0000000020010400 RDI: 0000000000000004
[ 1639.455990] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1639.456005] R10: 0000000000001000 R11: 0000000000000293 R12: 0000000000000004
[ 1639.456020] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001
[ 1639.456052]  </TASK>
[ 1639.501167] FAULT_INJECTION: forcing a failure.
[ 1639.501167] name failslab, interval 1, probability 0, space 0, times 0
[ 1639.502962] CPU: 0 UID: 0 PID: 11835 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1639.502994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1639.503008] Call Trace:
[ 1639.503016]  <TASK>
[ 1639.503025]  dump_stack_lvl+0xfa/0x120
[ 1639.503069]  should_fail_ex+0x4d7/0x5e0
[ 1639.503100]  ? kobject_uevent_env+0x22e/0xf90
[ 1639.503130]  should_failslab+0xc2/0x120
[ 1639.503164]  __kmalloc_cache_noprof+0x80/0x730
[ 1639.503202]  ? ___ratelimit+0x3c0/0x910
[ 1639.503245]  ? kobject_uevent_env+0x22e/0xf90
[ 1639.503276]  kobject_uevent_env+0x22e/0xf90
[ 1639.503312]  ? lock_is_held_type+0x9e/0x120
[ 1639.503350]  loop_configure+0xe31/0x15a0
[ 1639.503410]  ? __pfx_loop_configure+0x10/0x10
[ 1639.503461]  ? avc_has_extended_perms+0x107/0xf20
[ 1639.503497]  ? find_held_lock+0x2b/0x80
[ 1639.503521]  ? avc_has_extended_perms+0x23b/0xf20
[ 1639.503555]  ? lock_release+0xc8/0x270
[ 1639.503588]  lo_ioctl+0x66d/0x1ca0
[ 1639.503630]  ? __pfx_lo_ioctl+0x10/0x10
[ 1639.503666]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1639.503707]  ? lock_acquire+0x15e/0x2d0
[ 1639.503736]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1639.503764]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1639.503800]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1639.503832]  ? lock_release+0xc8/0x270
[ 1639.503865]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1639.503932]  ? check_irq_usage+0x210/0xb40
[ 1639.503960]  ? __fget_files+0x34/0x3b0
[ 1639.503991]  ? find_held_lock+0x2b/0x80
[ 1639.504013]  ? __fget_files+0x203/0x3b0
[ 1639.504045]  ? __pfx_lo_ioctl+0x10/0x10
[ 1639.504079]  blkdev_ioctl+0x365/0x6d0
[ 1639.504116]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1639.504152]  ? selinux_file_ioctl+0xb9/0x280
[ 1639.504181]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1639.504218]  __x64_sys_ioctl+0x18f/0x210
[ 1639.504247]  do_syscall_64+0xbf/0x420
[ 1639.504273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1639.504297] RIP: 0033:0x7f73dfd328d7
[ 1639.504317] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1639.504340] RSP: 002b:00007f73dd2a7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1639.504363] RAX: ffffffffffffffda RBX: 00007f73dfd7c970 RCX: 00007f73dfd328d7
[ 1639.504379] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1639.504393] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1639.504408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1639.504421] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1639.504452]  </TASK>
[ 1639.547497] loop3: detected capacity change from 0 to 512
[ 1639.579021] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1639.580803] EXT4-fs (loop1): group descriptors corrupted!
[ 1639.586566] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1639.588016] EXT4-fs (loop3): group descriptors corrupted!
[ 1639.602425] loop1: detected capacity change from 0 to 4132
[ 1639.619990] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1639.621666] EXT4-fs (loop1): group descriptors corrupted!
[ 1639.627695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1639.665569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:58:53 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20fdef000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:53 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x6e22, 0x4000000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="0f", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="83", 0x1}], 0x1}}], 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/20, 0x14, 0x0, 0x0}, &(0x7f0000000280)=0x40)

20:58:53 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 45)

20:58:53 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0xa}], 0x2, 0x600, 0x0)

20:58:53 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 17)

20:58:53 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:53 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x30000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:53 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140))

[ 1649.632197] loop4: detected capacity change from 0 to 4132
[ 1649.651252] loop2: detected capacity change from 0 to 4132
[ 1649.661724] loop1: detected capacity change from 0 to 4132
[ 1649.669947] EXT4-fs (loop2): unsupported descriptor size 0
[ 1649.671043] EXT4-fs (loop4): inodes count not valid: 15727904 vs 32
[ 1649.673378] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1649.674330] EXT4-fs (loop1): group descriptors corrupted!
[ 1649.678917] loop3: detected capacity change from 0 to 512
[ 1649.682753] loop5: detected capacity change from 0 to 512
[ 1649.689394] loop1: detected capacity change from 0 to 4132
[ 1649.692052] loop4: detected capacity change from 0 to 4132
20:58:53 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x10}], 0x2, 0x600, 0x0)

20:58:53 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140))

[ 1649.697945] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1649.699585] EXT4-fs (loop1): group descriptors corrupted!
[ 1649.715194] EXT4-fs (loop4): inodes count not valid: 15727904 vs 32
[ 1649.735620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1649.739978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
20:58:53 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:53 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x0, 0x2000}, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x7a, 0x5, 0x9, 0x0, 0x3, 0x80020, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_config_ext={0x25c8, 0x239}, 0x8400, 0x8, 0x400, 0x2, 0xfc00000000000000, 0xbe, 0x2, 0x0, 0x3ff, 0x0, 0x40}, 0xffffffffffffffff, 0x4, r0, 0x8)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x2)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r3=>0x0)
io_destroy(r3)
r4 = creat(&(0x7f0000000300)='./file0\x00', 0x42)
syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='\x00', 0x0, 0x0, 0x0, 0x24902b, &(0x7f0000000e40)=ANY=[])
clone3(&(0x7f0000000ac0)={0x240800000, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)=<r5=>0x0, {0x6}, &(0x7f0000000900)=""/68, 0x44, &(0x7f0000000980)=""/203, &(0x7f0000000a80)=[0x0, 0x0, 0x0], 0x3, {r4}}, 0x58)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x7, 0x81, 0x53, 0x20, 0x0, 0x1b40, 0x21, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000780), 0x9}, 0x820, 0x9, 0x80000000, 0x9, 0x800, 0x80, 0x4, 0x0, 0x0, 0x0, 0x200}, r5, 0x5, r2, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv2(r6, &(0x7f0000000380)=[{&(0x7f0000000080)=""/174, 0xae}], 0x1, 0x0, 0x0, 0x0)
r7 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xfbbd, 0x800)
ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r8=>r0, {0x3}}, './file0\x00'})
io_submit(0x0, 0x5, &(0x7f0000000740)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0xa, 0x0, r1, &(0x7f00000001c0)="af286fdef26498b81992c5e4083e7757595cf59f897b8e5373b5e1a947f0d25e2af2b8523159721841acb1cd47753170237af2006a45f6ca3b88d4700d1f31568ac50f9a6658156e941f9681bc9717608675b2f80e9f3324a297ebce64fc81f540427c4aa019b505987ebbe6b3a0798fc521dec0340f254ca2a0e2a88b33280681d5eeaf9e802cc0cef90f191a040fef5f51ba951ca8db66bfca546ba843201eaebd287642dd73629fe07923da65245aa4", 0xb1, 0xffffffff, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="93f03e0cb0db9dba8ead8c3882963d1e72bd67c19fb66c07cc15bb1ca419a23c9a45b5fb5f5608bbfc2117e670f0e67adb8765304a1a", 0x36}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x2, r6, &(0x7f0000000400)="1cf0ba5ae955fffe817570794519ce88004992a72aac51953ff7e4b5bcc76c044d4a411fd0b520536717faf4d24a1def0713b7ef94640e582078c61241799c7f4d32753a8ce254ce09e84b5c007568a18e70b37670ea195821f03c5845e1e61e194e03c57b2956d1dcc670c37e32540428ce5c0697183ddc2902b3efd56a0dde3ef3513ecb756d4efb7ebcf6d0468e586f8344952d6327a75d7e120a7b01dbf90947cdc72edb39898537cc8f8346fa8a5301a9ba5df0c4ac6d25995fd21603e47c64d455f5416529d4f3c13a14841797c47301", 0xd3, 0x7, 0x0, 0x0, r7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000500)="978c048fe87517deb6ee639e716f5855552a24fdb8604dec09cb73af6e555aeea701d8f354bafd35319196c3bc95eb1700e505f7e53bf70496889113b5b78a05cd67301ecd38d792f5dce3dd59f226d163514b4c300495136b63530862bf493e2d59b10bb7f5ac69712f398811f4d41c909b99199eda01a5c54bbca2d223b25d16e468a28d93ca101d9f8bde124732edb40fe128e89d1864adecad79c6ef1e5b1a6ff707d24f26f47c9d3d91c738bde2b751", 0xb2, 0x3, 0x0, 0x0, r8}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x87, r4, &(0x7f0000000600)="4be460a53ab14bf65caebe81f09bcd910559118786f4959166f81b1096e28de76537725a9c9e78ab5a483d9f398f4bdbc5ab13899d338d85da57ac042567519cedf795208ee59145c1f143df9ff55f2f41cd27a85fdcaaae2c9b2c7a25fb7efaa98e9078f5ebec02d05ba2f0544c45561333517346047322f23c3b2c0f168cbd3aa14c2e860a84e5a86dd6ebc092d1d4845d5d4c34a44e26ec01f515411f5eaf6c4e3af24219a0ba1d06bfc22ac6150678cdb1e5b343d62fe0057b91956562ee9cc37cb7a700b00aed23e2677e8e0e91e0e1202b711730d4e21e77e6510ce57ccc700f43dca04a1d38bfc61385a1106ffd2de342", 0xf4, 0x1ff, 0x0, 0x1, r1}])

20:58:53 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:53 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x300}], 0x2, 0x600, 0x0)

20:58:53 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 18)

20:58:53 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000f0000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:58:53 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0)

[ 1649.845127] loop1: detected capacity change from 0 to 4132
[ 1649.846081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1649.854774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1649.861943] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1649.862805] EXT4-fs (loop1): group descriptors corrupted!
[ 1649.877789] loop1: detected capacity change from 0 to 4132
[ 1649.884600] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1649.885484] EXT4-fs (loop1): group descriptors corrupted!
[ 1649.907300] loop2: detected capacity change from 0 to 4132
[ 1649.928351] EXT4-fs (loop2): unsupported descriptor size 0
[ 1649.928527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1649.945607] EXT4-fs (loop4): inodes count not valid: 15728672 vs 32
[ 1649.949494] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1649.961898] EXT4-fs (loop4): inodes count not valid: 15728672 vs 32
20:59:01 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0)

20:59:01 executing program 7:
clock_gettime(0x2, &(0x7f0000000040)={0x0, <r0=>0x0})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setitimer(0x2, &(0x7f0000000000)={{}, {0x0, r0/1000+10000}}, 0x0)
setitimer(0x2, 0x0, 0x0)
io_setup(0x400, &(0x7f0000000080))

20:59:01 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000f5000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:01 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x500}], 0x2, 0x600, 0x0)

20:59:01 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:01 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 19)

20:59:01 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:01 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 46)

[ 1657.695728] set_capacity_and_notify: 3 callbacks suppressed
[ 1657.695742] loop2: detected capacity change from 0 to 4132
[ 1657.697204] loop5: detected capacity change from 0 to 512
[ 1657.707048] EXT4-fs (loop2): unsupported descriptor size 0
[ 1657.722288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1657.725583] loop1: detected capacity change from 0 to 4132
20:59:01 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1657.746208] syz-executor.7 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1657.759858] loop4: detected capacity change from 0 to 4132
[ 1657.765214] EXT4-fs (loop4): inodes count not valid: 16056352 vs 32
[ 1657.770806] FAULT_INJECTION: forcing a failure.
[ 1657.770806] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1657.771016] loop4: detected capacity change from 0 to 4132
[ 1657.772505] CPU: 1 UID: 0 PID: 11923 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1657.772537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1657.772550] Call Trace:
[ 1657.772558]  <TASK>
[ 1657.772567]  dump_stack_lvl+0xfa/0x120
[ 1657.772610]  should_fail_ex+0x4d7/0x5e0
[ 1657.772635]  ? page_copy_sane+0xce/0x2b0
[ 1657.772662]  copy_folio_from_iter_atomic+0x383/0x1820
[ 1657.772700]  ? avc_has_perm+0x12b/0x1d0
[ 1657.772738]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 1657.772766]  ? shmem_write_begin+0x1ab/0x3b0
[ 1657.772800]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1657.772830]  ? mark_held_locks+0x49/0x80
[ 1657.772860]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1657.772883]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1657.772911]  ? ns_to_timespec64+0x59/0xc0
[ 1657.772952]  generic_perform_write+0x1d7/0x810
[ 1657.773000]  ? __pfx_generic_perform_write+0x10/0x10
[ 1657.773034]  ? file_update_time_flags+0x24c/0x4f0
[ 1657.773075]  shmem_file_write_iter+0x111/0x140
[ 1657.773105]  vfs_write+0xbe9/0x1150
[ 1657.773134]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1657.773161]  ? __fget_files+0x34/0x3b0
[ 1657.773189]  ? __pfx_vfs_write+0x10/0x10
[ 1657.773240]  __x64_sys_pwrite64+0x1f1/0x260
[ 1657.773271]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1657.773312]  do_syscall_64+0xbf/0x420
[ 1657.773337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1657.773360] RIP: 0033:0x7fedf47fcab7
[ 1657.773378] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1657.773399] RSP: 002b:00007fedf1dbef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1657.773421] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf47fcab7
[ 1657.773437] RDX: 0000000000000020 RSI: 0000000020010400 RDI: 0000000000000004
[ 1657.773450] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1657.773464] R10: 0000000000001000 R11: 0000000000000293 R12: 0000000000000004
[ 1657.773477] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001
[ 1657.773509]  </TASK>
[ 1657.792124] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1657.792942] EXT4-fs (loop1): group descriptors corrupted!
[ 1657.794074] loop3: detected capacity change from 0 to 512
[ 1657.795881] loop1: detected capacity change from 0 to 4132
[ 1657.796927] EXT4-fs (loop4): inodes count not valid: 16056352 vs 32
[ 1657.799468] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1657.801455] EXT4-fs (loop1): group descriptors corrupted!
[ 1657.840303] loop1: detected capacity change from 0 to 4132
[ 1657.842922] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1657.843765] EXT4-fs (loop1): group descriptors corrupted!
20:59:01 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:01 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 47)

[ 1657.851369] loop1: detected capacity change from 0 to 4132
[ 1657.852913] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1657.853730] EXT4-fs (loop1): group descriptors corrupted!
[ 1657.856720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:59:01 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1657.879400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
20:59:02 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0)

20:59:02 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x600}], 0x2, 0x600, 0x0)

20:59:02 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 20)

[ 1657.928882] loop2: detected capacity change from 0 to 4132
20:59:02 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20effd000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1657.938820] EXT4-fs (loop2): unsupported descriptor size 0
[ 1657.942641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:59:02 executing program 7:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000001540)=[{&(0x7f0000000080)="ae", 0x1}], 0x1, 0x6)
r3 = gettid()
r4 = fcntl$getown(r0, 0x9)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r5, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000000)={r2, r0, 0x8})

[ 1657.953596] EXT4-fs (loop4): inodes count not valid: 16641824 vs 32
[ 1657.957844] EXT4-fs (loop4): inodes count not valid: 16641824 vs 32
20:59:02 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffe000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1657.979107] FAULT_INJECTION: forcing a failure.
[ 1657.979107] name failslab, interval 1, probability 0, space 0, times 0
[ 1657.981179] CPU: 1 UID: 0 PID: 11936 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1657.981209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1657.981223] Call Trace:
[ 1657.981231]  <TASK>
[ 1657.981240]  dump_stack_lvl+0xfa/0x120
[ 1657.981282]  should_fail_ex+0x4d7/0x5e0
[ 1657.981312]  should_failslab+0xc2/0x120
[ 1657.981344]  kmem_cache_alloc_node_noprof+0x87/0x730
[ 1657.981369]  ? mark_held_locks+0x49/0x80
[ 1657.981396]  ? __alloc_skb+0x159/0x430
[ 1657.981426]  ? __alloc_skb+0x159/0x430
[ 1657.981447]  __alloc_skb+0x159/0x430
[ 1657.981467]  ? __alloc_skb+0x369/0x430
[ 1657.981490]  ? __pfx___alloc_skb+0x10/0x10
[ 1657.981511]  ? lock_acquire+0x15e/0x2d0
[ 1657.981538]  ? netlink_has_listeners+0x7f/0x430
[ 1657.981567]  ? netlink_has_listeners+0x20d/0x430
[ 1657.981592]  ? lock_release+0xc8/0x270
[ 1657.981623]  alloc_uevent_skb+0x7b/0x210
[ 1657.981655]  kobject_uevent_env+0xa8c/0xf90
[ 1657.981688]  ? lock_is_held_type+0x9e/0x120
[ 1657.981725]  loop_configure+0xe31/0x15a0
[ 1657.981781]  ? __pfx_loop_configure+0x10/0x10
[ 1657.981829]  ? avc_has_extended_perms+0x107/0xf20
[ 1657.981863]  ? find_held_lock+0x2b/0x80
[ 1657.981884]  ? avc_has_extended_perms+0x23b/0xf20
[ 1657.981916]  ? lock_release+0xc8/0x270
[ 1657.981946]  lo_ioctl+0x66d/0x1ca0
[ 1657.981993]  ? __pfx_lo_ioctl+0x10/0x10
[ 1657.982024]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1657.982063]  ? lock_acquire+0x15e/0x2d0
[ 1657.982090]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1657.982117]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1657.982168]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1657.982200]  ? lock_release+0xc8/0x270
[ 1657.982231]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1657.982296]  ? check_irq_usage+0x210/0xb40
[ 1657.982331]  ? __fget_files+0x34/0x3b0
[ 1657.982360]  ? find_held_lock+0x2b/0x80
[ 1657.982381]  ? __fget_files+0x203/0x3b0
[ 1657.982410]  ? __pfx_lo_ioctl+0x10/0x10
[ 1657.982443]  blkdev_ioctl+0x365/0x6d0
[ 1657.982477]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1657.982511]  ? selinux_file_ioctl+0xb9/0x280
[ 1657.982539]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1657.982574]  __x64_sys_ioctl+0x18f/0x210
[ 1657.982601]  do_syscall_64+0xbf/0x420
[ 1657.982625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1657.982648] RIP: 0033:0x7f73dfd328d7
[ 1657.982666] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1657.982688] RSP: 002b:00007f73dd2a7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1657.982709] RAX: ffffffffffffffda RBX: 00007f73dfd7c970 RCX: 00007f73dfd328d7
[ 1657.982724] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1657.982737] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1657.982751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1657.982764] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1657.982792]  </TASK>
[ 1658.027800] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1658.028623] EXT4-fs (loop1): group descriptors corrupted!
20:59:02 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x700}], 0x2, 0x600, 0x0)

20:59:02 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1658.101810] EXT4-fs (loop4): inodes count not valid: 16711456 vs 32
[ 1658.105579] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1658.106452] EXT4-fs (loop1): group descriptors corrupted!
[ 1658.119670] FAULT_INJECTION: forcing a failure.
[ 1658.119670] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1658.121465] CPU: 1 UID: 0 PID: 11951 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1658.121495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1658.121508] Call Trace:
[ 1658.121516]  <TASK>
[ 1658.121525]  dump_stack_lvl+0xfa/0x120
[ 1658.121568]  should_fail_ex+0x4d7/0x5e0
[ 1658.121599]  should_fail_alloc_page+0xe0/0x110
[ 1658.121633]  prepare_alloc_pages+0x1eb/0x550
[ 1658.121670]  __alloc_frozen_pages_noprof+0x17f/0x2000
[ 1658.121708]  ? perf_trace_lock+0xb5/0x5d0
[ 1658.121744]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1658.121779]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1658.121819]  ? perf_trace_lock+0xb5/0x5d0
[ 1658.121853]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1658.121883]  ? lock_is_held_type+0x9e/0x120
[ 1658.121919]  ? lock_is_held_type+0x9e/0x120
[ 1658.121949]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1658.121996]  ? policy_nodemask+0xeb/0x4e0
[ 1658.122026]  alloc_pages_mpol+0xed/0x340
[ 1658.122056]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1658.122076]  ? filemap_get_entry+0x1bb/0x3b0
[ 1658.122110]  ? __pfx_filemap_get_entry+0x10/0x10
[ 1658.122163]  folio_alloc_mpol_noprof+0x38/0xa0
[ 1658.122194]  shmem_alloc_folio+0x11b/0x140
[ 1658.122225]  shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
[ 1658.122270]  ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10
[ 1658.122308]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1658.122346]  shmem_write_begin+0x194/0x3b0
[ 1658.122380]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1658.122409]  ? mark_held_locks+0x49/0x80
[ 1658.122438]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1658.122461]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1658.122489]  ? ktime_get_coarse_real_ts64_mg+0x213/0x2a0
[ 1658.122528]  generic_perform_write+0x391/0x810
[ 1658.122570]  ? __pfx_generic_perform_write+0x10/0x10
[ 1658.122617]  ? file_update_time_flags+0x24c/0x4f0
[ 1658.122659]  shmem_file_write_iter+0x111/0x140
[ 1658.122689]  vfs_write+0xbe9/0x1150
[ 1658.122718]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1658.122747]  ? __fget_files+0x34/0x3b0
[ 1658.122777]  ? __pfx_vfs_write+0x10/0x10
[ 1658.122829]  __x64_sys_pwrite64+0x1f1/0x260
[ 1658.122859]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1658.122900]  do_syscall_64+0xbf/0x420
[ 1658.122924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1658.122947] RIP: 0033:0x7fedf47fcab7
[ 1658.122964] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1658.122985] RSP: 002b:00007fedf1dbef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1658.123007] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf47fcab7
[ 1658.123023] RDX: 000000000000001d RSI: 0000000020012600 RDI: 0000000000000004
[ 1658.123037] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1658.123050] R10: 0000000000004200 R11: 0000000000000293 R12: 0000000000000004
[ 1658.123064] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[ 1658.123096]  </TASK>
[ 1658.196687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1658.201177] EXT4-fs (loop2): unsupported descriptor size 0
[ 1658.215335] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz-executor.3: iget: special inode unallocated
[ 1658.223435] EXT4-fs (loop3): get root inode failed
[ 1658.223818] EXT4-fs (loop3): mount failed
[ 1658.253401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:59:10 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 48)

20:59:10 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0xa00}], 0x2, 0x600, 0x0)

20:59:10 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 21)

20:59:10 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:10 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x7ff)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef01", 0x3b, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00)=ANY=[])

20:59:10 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2", 0x10, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:10 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2001ff000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:10 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140)) (fail_nth: 1)

[ 1666.689709] set_capacity_and_notify: 8 callbacks suppressed
[ 1666.689734] loop1: detected capacity change from 0 to 4132
[ 1666.695319] loop5: detected capacity change from 0 to 512
[ 1666.714079] loop2: detected capacity change from 0 to 4132
[ 1666.722404] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1666.724018] EXT4-fs (loop1): group descriptors corrupted!
[ 1666.732231] FAULT_INJECTION: forcing a failure.
[ 1666.732231] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1666.734315] CPU: 1 UID: 0 PID: 11980 Comm: syz-executor.0 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1666.734348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1666.734362] Call Trace:
[ 1666.734371]  <TASK>
[ 1666.734380]  dump_stack_lvl+0xfa/0x120
[ 1666.734425]  should_fail_ex+0x4d7/0x5e0
[ 1666.734457]  _copy_to_user+0x32/0xd0
[ 1666.734487]  simple_read_from_buffer+0xe0/0x180
[ 1666.734519]  proc_fail_nth_read+0x18a/0x240
[ 1666.734557]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1666.734595]  ? security_file_permission+0x22/0x90
[ 1666.734630]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1666.734666]  vfs_read+0x1eb/0xc70
[ 1666.734697]  ? __pfx___mutex_lock+0x10/0x10
[ 1666.734718]  ? __fget_files+0x34/0x3b0
[ 1666.734748]  ? __pfx_vfs_read+0x10/0x10
[ 1666.734779]  ? lock_release+0xc8/0x270
[ 1666.734814]  ? __fget_files+0x20d/0x3b0
[ 1666.734854]  ksys_read+0x121/0x240
[ 1666.734881]  ? __pfx_ksys_read+0x10/0x10
[ 1666.734911]  ? fput+0x92/0xd0
[ 1666.734950]  do_syscall_64+0xbf/0x420
[ 1666.734984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1666.735008] RIP: 0033:0x7f323459369c
[ 1666.735027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1666.735050] RSP: 002b:00007f3231b56170 EFLAGS: 00000246
[ 1666.735043] FAULT_INJECTION: forcing a failure.
[ 1666.735043] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1666.735067]  ORIG_RAX: 0000000000000000
[ 1666.735077] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f323459369c
[ 1666.735094] RDX: 000000000000000f RSI: 00007f3231b561e0 RDI: 0000000000000005
[ 1666.735109] RBP: 00007f3231b561d0 R08: 0000000000000000 R09: 0000000000000000
[ 1666.735124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1666.735139] R13: 00007ffeb6a9ad0f R14: 00007f3231b56300 R15: 0000000000022000
[ 1666.735169]  </TASK>
[ 1666.762708] CPU: 0 UID: 0 PID: 11979 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1666.762741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1666.762755] Call Trace:
[ 1666.762764]  <TASK>
[ 1666.762774]  dump_stack_lvl+0xfa/0x120
[ 1666.762819]  should_fail_ex+0x4d7/0x5e0
[ 1666.762845]  ? page_copy_sane+0xce/0x2b0
[ 1666.762873]  copy_folio_from_iter_atomic+0x383/0x1820
[ 1666.762911]  ? __lock_acquire+0x453/0x2150
[ 1666.762949]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 1666.762986]  ? shmem_write_begin+0x1ab/0x3b0
[ 1666.763022]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1666.763057]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1666.763092]  generic_perform_write+0x1d7/0x810
[ 1666.763133]  ? __pfx_generic_perform_write+0x10/0x10
[ 1666.763165]  ? generic_update_time+0xcb/0xf0
[ 1666.763201]  ? mnt_put_write_access_file+0xb7/0xe0
[ 1666.763232]  ? file_update_time_flags+0x24c/0x4f0
[ 1666.763273]  shmem_file_write_iter+0x111/0x140
[ 1666.763304]  vfs_write+0xbe9/0x1150
[ 1666.763335]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1666.763364]  ? __fget_files+0x34/0x3b0
[ 1666.763395]  ? __pfx_vfs_write+0x10/0x10
[ 1666.763446]  __x64_sys_pwrite64+0x1f1/0x260
[ 1666.763478]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1666.763520]  do_syscall_64+0xbf/0x420
[ 1666.763547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1666.763572] RIP: 0033:0x7fedf47fcab7
[ 1666.763591] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1666.763613] RSP: 002b:00007fedf1dbef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1666.763637] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf47fcab7
[ 1666.763654] RDX: 000000000000001d RSI: 0000000020012600 RDI: 0000000000000004
[ 1666.763668] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1666.763683] R10: 0000000000004200 R11: 0000000000000293 R12: 0000000000000004
[ 1666.763698] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[ 1666.763729]  </TASK>
[ 1666.795889] EXT4-fs (loop2): unsupported descriptor size 0
[ 1666.796567] loop4: detected capacity change from 0 to 4132
[ 1666.798810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1666.806865] loop1: detected capacity change from 0 to 4132
[ 1666.818682] loop3: detected capacity change from 0 to 512
[ 1666.840007] EXT4-fs (loop4): inodes count not valid: 16711968 vs 32
20:59:10 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140))

[ 1666.858683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1666.867334] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1666.868912] EXT4-fs (loop1): group descriptors corrupted!
20:59:10 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 49)

[ 1666.870609] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1666.885752] loop4: detected capacity change from 0 to 4132
20:59:11 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x60000}], 0x2, 0x600, 0x0)

[ 1666.919650] EXT4-fs (loop4): inodes count not valid: 16711968 vs 32
20:59:11 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2", 0x10, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:11 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201001283", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934f5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000012800)="8081000000180000e2f4655fe2f4655fe2f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4200}, {&(0x7f0000013900)="111fc0d901", 0x5, 0x30000}], 0x0, &(0x7f0000014d00))
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xc7)

20:59:11 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:11 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 22)

[ 1666.980893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1666.984595] loop1: detected capacity change from 0 to 8192
[ 1666.990323] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1666.991726] EXT4-fs (loop1): group descriptors corrupted!
[ 1667.003918] loop1: detected capacity change from 0 to 8192
[ 1667.027469] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1667.029025] EXT4-fs (loop1): group descriptors corrupted!
[ 1667.054253] loop2: detected capacity change from 0 to 4132
20:59:11 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20feff000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1667.069360] EXT4-fs (loop2): unsupported descriptor size 0
[ 1667.125764] FAULT_INJECTION: forcing a failure.
[ 1667.125764] name failslab, interval 1, probability 0, space 0, times 0
[ 1667.127748] CPU: 1 UID: 0 PID: 12003 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1667.127781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1667.127796] Call Trace:
[ 1667.127804]  <TASK>
[ 1667.127813]  dump_stack_lvl+0xfa/0x120
[ 1667.127860]  should_fail_ex+0x4d7/0x5e0
[ 1667.127893]  ? getname_flags.part.0+0x48/0x540
[ 1667.127916]  should_failslab+0xc2/0x120
[ 1667.127952]  kmem_cache_alloc_noprof+0x80/0x710
[ 1667.127992]  ? getname_flags.part.0+0x48/0x540
[ 1667.128014]  getname_flags.part.0+0x48/0x540
[ 1667.128039]  getname_flags+0x95/0xe0
[ 1667.128068]  do_sys_openat2+0x9f/0x240
[ 1667.128092]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1667.128126]  __x64_sys_openat+0x142/0x200
[ 1667.128150]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1667.128186]  do_syscall_64+0xbf/0x420
[ 1667.128212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1667.128237] RIP: 0033:0x7fedf47fca04
[ 1667.128256] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1667.128279] RSP: 002b:00007fedf1dbeed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1667.128302] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf47fca04
[ 1667.128319] RDX: 0000000000000002 RSI: 00007fedf1dbf000 RDI: 00000000ffffff9c
[ 1667.128334] RBP: 00007fedf1dbf000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1667.128349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1667.128364] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1667.128394]  </TASK>
20:59:11 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x80000}], 0x2, 0x600, 0x0)

20:59:11 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

20:59:11 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0ffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:11 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2", 0x10, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1667.178069] EXT4-fs (loop4): inodes count not valid: 16776736 vs 32
[ 1667.208478] EXT4-fs (loop4): inodes count not valid: 16776736 vs 32
20:59:11 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="390300000000000000002000000008000300", @ANYRES32=r3, @ANYBLOB="19f892d95494993000b515199b832906361cc907f98eb00cb68640dd2a1747225ba79ef6e6b2196fc4891e202bb0660ccfdab1a1809321056eb8f51c5fe098c3e2fda3f911e5e57beb03ea209981d6ec8d"], 0x180}}, 0x0)

[ 1667.259301] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1667.260921] EXT4-fs (loop1): group descriptors corrupted!
[ 1667.293313] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1667.295140] EXT4-fs (loop1): group descriptors corrupted!
20:59:11 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="204000010002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1667.302056] EXT4-fs (loop2): unsupported descriptor size 0
[ 1667.356685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1667.416473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1667.442109] EXT4-fs (loop4): inodes count not valid: 16793632 vs 32
[ 1667.458156] EXT4-fs (loop4): inodes count not valid: 16793632 vs 32
20:59:20 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 23)

20:59:20 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000040002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:20 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x3c6231e5, 0x1, 0xffffffffffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0xffff, @private2, 0x80000001}}, 0x0, 0x0, 0x47, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
bind$inet6(r2, &(0x7f0000000740)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
shutdown(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000200)={{r1}, {@void, @max}})
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(r2, 0x1)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

20:59:20 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0ffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:20 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8", 0x18, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:20 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf02a, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

20:59:20 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x100000}], 0x2, 0x600, 0x0)

20:59:20 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x2, &(0x7f0000000140))

[ 1676.261491] set_capacity_and_notify: 8 callbacks suppressed
[ 1676.261519] loop4: detected capacity change from 0 to 4132
[ 1676.270528] EXT4-fs (loop4): inodes count not valid: 67108896 vs 32
[ 1676.276761] loop5: detected capacity change from 0 to 120
[ 1676.277526] loop4: detected capacity change from 0 to 4132
[ 1676.284321] EXT4-fs (loop4): inodes count not valid: 67108896 vs 32
20:59:20 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x1000000}], 0x2, 0x600, 0x0)

[ 1676.315058] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1676.317356] loop2: detected capacity change from 0 to 4132
[ 1676.318552] loop1: detected capacity change from 0 to 30847
[ 1676.324511] loop3: detected capacity change from 0 to 512
20:59:20 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000080002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:20 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b2f, &(0x7f0000000140))

[ 1676.341614] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1676.342595] EXT4-fs (loop1): group descriptors corrupted!
[ 1676.342737] EXT4-fs (loop2): unsupported descriptor size 0
[ 1676.346556] loop5: detected capacity change from 0 to 120
[ 1676.356154] loop1: detected capacity change from 0 to 30847
[ 1676.367247] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1676.368136] EXT4-fs (loop1): group descriptors corrupted!
[ 1676.370473] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1676.384275] loop4: detected capacity change from 0 to 4132
[ 1676.389392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1676.398519] EXT4-fs (loop4): inodes count not valid: 134217760 vs 32
[ 1676.415930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:59:20 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 24)

20:59:20 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x2000000}], 0x2, 0x600, 0x0)

20:59:20 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8", 0x18, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:20 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b30, &(0x7f0000000140))

20:59:20 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf03c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

20:59:20 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1676.482071] FAULT_INJECTION: forcing a failure.
[ 1676.482071] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1676.484007] CPU: 0 UID: 0 PID: 12059 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1676.484038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1676.484052] Call Trace:
[ 1676.484061]  <TASK>
[ 1676.484070]  dump_stack_lvl+0xfa/0x120
[ 1676.484115]  should_fail_ex+0x4d7/0x5e0
[ 1676.484147]  strncpy_from_user+0x3b/0x2f0
[ 1676.484186]  getname_flags.part.0+0x8d/0x540
[ 1676.484212]  getname_flags+0x95/0xe0
[ 1676.484240]  do_sys_openat2+0x9f/0x240
[ 1676.484263]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1676.484298]  __x64_sys_openat+0x142/0x200
[ 1676.484321]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1676.484356]  do_syscall_64+0xbf/0x420
[ 1676.484382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1676.484406] RIP: 0033:0x7fedf47fca04
[ 1676.484425] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1676.484447] RSP: 002b:00007fedf1dbeed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1676.484470] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf47fca04
[ 1676.484486] RDX: 0000000000000002 RSI: 00007fedf1dbf000 RDI: 00000000ffffff9c
[ 1676.484501] RBP: 00007fedf1dbf000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1676.484516] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1676.484530] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1676.484560]  </TASK>
[ 1676.515091] loop5: detected capacity change from 0 to 120
[ 1676.519998] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
20:59:20 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000200002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1676.552014] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1676.568857] EXT4-fs (loop2): unsupported descriptor size 0
[ 1676.656925] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1676.659819] EXT4-fs (loop1): group descriptors corrupted!
[ 1676.667924] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1676.668732] EXT4-fs (loop1): group descriptors corrupted!
20:59:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf045, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

20:59:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 25)

20:59:29 executing program 7:
r0 = syz_mount_image$msdos(&(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0)
mknodat$null(r0, &(0x7f0000000280)='./file1\x00', 0x10, 0x103)
lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x2)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
rmdir(&(0x7f0000000180)='./file1\x00')
symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')
open$dir(&(0x7f0000000000)='./file0\x00', 0x4002, 0x21)

20:59:29 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:29 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b31, &(0x7f0000000140))

20:59:29 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200048200002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8", 0x18, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:29 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x3000000}], 0x2, 0x600, 0x0)

[ 1685.594213] FAULT_INJECTION: forcing a failure.
[ 1685.594213] name failslab, interval 1, probability 0, space 0, times 0
[ 1685.596437] CPU: 0 UID: 0 PID: 12088 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1685.596473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1685.596489] Call Trace:
[ 1685.596497]  <TASK>
[ 1685.596508]  dump_stack_lvl+0xfa/0x120
[ 1685.596560]  should_fail_ex+0x4d7/0x5e0
[ 1685.596593]  ? alloc_empty_file+0x58/0x1e0
[ 1685.596633]  should_failslab+0xc2/0x120
[ 1685.596669]  kmem_cache_alloc_noprof+0x80/0x710
[ 1685.596705]  ? alloc_empty_file+0x58/0x1e0
[ 1685.596743]  alloc_empty_file+0x58/0x1e0
[ 1685.596785]  path_openat+0xee/0x2d30
[ 1685.596836]  ? __pfx_path_openat+0x10/0x10
[ 1685.596884]  do_filp_open+0x1e8/0x450
[ 1685.596918]  ? __pfx_do_filp_open+0x10/0x10
[ 1685.596961]  ? __virt_addr_valid+0x2e8/0x5d0
[ 1685.597001]  ? find_held_lock+0x2b/0x80
[ 1685.597026]  ? alloc_fd+0x2c1/0x560
[ 1685.597057]  ? lock_release+0xc8/0x270
[ 1685.597095]  ? _raw_spin_unlock+0x1e/0x40
[ 1685.597129]  ? alloc_fd+0x2c1/0x560
[ 1685.597170]  do_sys_openat2+0x107/0x240
[ 1685.597195]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1685.597233]  __x64_sys_openat+0x142/0x200
[ 1685.597260]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1685.597300]  do_syscall_64+0xbf/0x420
[ 1685.597329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1685.597355] RIP: 0033:0x7fedf47fca04
[ 1685.597376] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1685.597402] RSP: 002b:00007fedf1dbeed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1685.597428] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf47fca04
[ 1685.597446] RDX: 0000000000000002 RSI: 00007fedf1dbf000 RDI: 00000000ffffff9c
[ 1685.597463] RBP: 00007fedf1dbf000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1685.597480] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1685.597496] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1685.597529]  </TASK>
[ 1685.646153] set_capacity_and_notify: 4 callbacks suppressed
[ 1685.646178] loop5: detected capacity change from 0 to 120
[ 1685.664862] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1685.677680] loop2: detected capacity change from 0 to 4132
[ 1685.682583] loop4: detected capacity change from 0 to 4132
[ 1685.691290] loop5: detected capacity change from 0 to 120
[ 1685.700312] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1685.704052] EXT4-fs (loop2): unsupported descriptor size 0
[ 1685.706163] EXT4-fs (loop4): inodes count not valid: 541589536 vs 32
[ 1685.725922] loop1: detected capacity change from 0 to 65536
[ 1685.734524] loop4: detected capacity change from 0 to 4132
[ 1685.753510] EXT4-fs (loop4): inodes count not valid: 541589536 vs 32
[ 1685.753782] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1685.758440] EXT4-fs (loop1): group descriptors corrupted!
20:59:29 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b32, &(0x7f0000000140))

20:59:29 executing program 7:
getgid()
syz_mount_image$msdos(&(0x7f0000002580), &(0x7f00000025c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002980), 0x800008, &(0x7f0000002a00)={[{@fat=@gid={'gid', 0x3d, 0xee01}}, {@nodots}, {@nodots}, {@fat=@errors_continue}], [{@hash}, {@dont_appraise}, {@fsmagic}, {@uid_lt={'uid<', 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, '!'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\('}}, {@euid_lt}, {@fowner_lt={'fowner<', 0xee00}}, {@subj_role={'subj_role', 0x3d, ':{}#+:'}}]})
chroot(&(0x7f0000000000)='./file0\x00')

20:59:29 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x4000000}], 0x2, 0x600, 0x0)

20:59:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 26)

[ 1685.817759] loop1: detected capacity change from 0 to 65536
[ 1685.842643] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1685.844239] EXT4-fs (loop1): group descriptors corrupted!
[ 1685.890474] loop3: detected capacity change from 0 to 512
[ 1685.933913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1685.984952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:59:38 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:38 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x5000000}], 0x2, 0x600, 0x0)

20:59:38 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf046, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

20:59:38 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966", 0x1c, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200020480002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:38 executing program 7:
r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
fsmount(r0, 0x1, 0xc)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close_range(r0, r1, 0x2)
fsopen(&(0x7f0000000000)='incremental-fs\x00', 0x1)

20:59:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 27)

20:59:38 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b33, &(0x7f0000000140))

[ 1694.817044] loop5: detected capacity change from 0 to 120
[ 1694.825217] loop1: detected capacity change from 0 to 98304
[ 1694.830322] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1694.835567] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1694.836310] EXT4-fs (loop1): group descriptors corrupted!
[ 1694.840703] loop5: detected capacity change from 0 to 120
[ 1694.849297] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1694.851841] FAULT_INJECTION: forcing a failure.
[ 1694.851841] name failslab, interval 1, probability 0, space 0, times 0
[ 1694.852224] loop1: detected capacity change from 0 to 98304
[ 1694.853866] CPU: 0 UID: 0 PID: 12140 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1694.853902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1694.853918] Call Trace:
[ 1694.853928]  <TASK>
[ 1694.853938]  dump_stack_lvl+0xfa/0x120
[ 1694.853995]  should_fail_ex+0x4d7/0x5e0
[ 1694.854029]  ? security_file_alloc+0x35/0x130
[ 1694.854065]  should_failslab+0xc2/0x120
[ 1694.854102]  kmem_cache_alloc_noprof+0x80/0x710
[ 1694.854130]  ? __create_object+0x59/0x80
[ 1694.854162]  ? security_file_alloc+0x35/0x130
[ 1694.854195]  security_file_alloc+0x35/0x130
[ 1694.854232]  init_file+0x95/0x4c0
[ 1694.854272]  alloc_empty_file+0x76/0x1e0
[ 1694.854314]  path_openat+0xee/0x2d30
[ 1694.854380]  ? __pfx_path_openat+0x10/0x10
[ 1694.854429]  do_filp_open+0x1e8/0x450
[ 1694.854463]  ? __pfx_do_filp_open+0x10/0x10
[ 1694.854498]  ? __virt_addr_valid+0x2e8/0x5d0
[ 1694.854537]  ? find_held_lock+0x2b/0x80
[ 1694.854563]  ? alloc_fd+0x2c1/0x560
[ 1694.854594]  ? lock_release+0xc8/0x270
[ 1694.854632]  ? _raw_spin_unlock+0x1e/0x40
[ 1694.854666]  ? alloc_fd+0x2c1/0x560
[ 1694.854707]  do_sys_openat2+0x107/0x240
[ 1694.854732]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1694.854771]  __x64_sys_openat+0x142/0x200
[ 1694.854796]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1694.854836]  do_syscall_64+0xbf/0x420
[ 1694.854865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1694.854892] RIP: 0033:0x7fedf47fca04
[ 1694.854912] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
20:59:38 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b34, &(0x7f0000000140))

[ 1694.854938] RSP: 002b:00007fedf1dbeed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1694.854962] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf47fca04
[ 1694.854978] RDX: 0000000000000002 RSI: 00007fedf1dbf000 RDI: 00000000ffffff9c
[ 1694.854992] RBP: 00007fedf1dbf000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1694.855006] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1694.855019] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1694.855046]  </TASK>
[ 1694.855769] loop2: detected capacity change from 0 to 4132
[ 1694.868401] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1694.879812] EXT4-fs (loop1): group descriptors corrupted!
[ 1694.887449] loop4: detected capacity change from 0 to 4132
[ 1694.906066] EXT4-fs (loop4): inodes count not valid: 1210056736 vs 32
[ 1694.907290] EXT4-fs (loop2): unsupported descriptor size 0
20:59:39 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf048, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1694.925838] loop4: detected capacity change from 0 to 4132
[ 1694.943895] EXT4-fs (loop4): inodes count not valid: 1210056736 vs 32
20:59:39 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x6000000}], 0x2, 0x600, 0x0)

[ 1694.970366] loop5: detected capacity change from 0 to 120
[ 1694.981040] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1694.989880] loop5: detected capacity change from 0 to 120
[ 1695.001908] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
20:59:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 28)

20:59:39 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:39 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b32, &(0x7f0000000140))

[ 1695.051714] loop1: detected capacity change from 0 to 131072
20:59:39 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966", 0x1c, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1695.066382] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1695.067205] EXT4-fs (loop1): group descriptors corrupted!
[ 1695.086281] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1695.087201] EXT4-fs (loop1): group descriptors corrupted!
[ 1695.108356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1695.131751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1695.150088] EXT4-fs (loop2): unsupported descriptor size 0
20:59:47 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966", 0x1c, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:47 executing program 7:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xffffeffe, 0x4)
connect$unix(r0, &(0x7f0000001140)=@file={0x1, './file0\x00'}, 0xffffffa5)

20:59:47 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffff00002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:47 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:47 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf049, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

20:59:47 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b35, &(0x7f0000000140))

20:59:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 29)

20:59:47 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x7000000}], 0x2, 0x600, 0x0)

[ 1702.932686] set_capacity_and_notify: 3 callbacks suppressed
[ 1702.932702] loop5: detected capacity change from 0 to 120
[ 1702.937073] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1702.940150] loop2: detected capacity change from 0 to 4132
[ 1702.940342] loop5: detected capacity change from 0 to 120
[ 1702.943912] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1702.946618] FAULT_INJECTION: forcing a failure.
[ 1702.946618] name failslab, interval 1, probability 0, space 0, times 0
[ 1702.947647] CPU: 1 UID: 0 PID: 12179 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1702.947663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1702.947671] Call Trace:
[ 1702.947675]  <TASK>
[ 1702.947680]  dump_stack_lvl+0xfa/0x120
[ 1702.947705]  should_fail_ex+0x4d7/0x5e0
[ 1702.947723]  ? __kernfs_new_node+0xd3/0x930
[ 1702.947736]  should_failslab+0xc2/0x120
[ 1702.947754]  kmem_cache_alloc_noprof+0x80/0x710
[ 1702.947768]  ? __pfx_avc_has_perm+0x10/0x10
[ 1702.947788]  ? __kernfs_new_node+0xd3/0x930
[ 1702.947799]  __kernfs_new_node+0xd3/0x930
[ 1702.947813]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1702.947828]  ? lock_acquire+0x15e/0x2d0
[ 1702.947845]  ? kernfs_root+0x23/0x2a0
[ 1702.947856]  ? find_held_lock+0x2b/0x80
[ 1702.947868]  ? kernfs_root+0xee/0x2a0
[ 1702.947880]  ? lock_release+0xc8/0x270
[ 1702.947893]  ? lock_is_held_type+0x9e/0x120
[ 1702.947915]  kernfs_new_node+0x13c/0x1e0
[ 1702.947932]  kernfs_create_dir_ns+0x4d/0x1a0
[ 1702.947948]  internal_create_group+0x440/0xeb0
[ 1702.947966]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1702.947989]  ? __pfx_internal_create_group+0x10/0x10
[ 1702.948001]  ? blk_validate_limits+0xc27/0x15c0
[ 1702.948022]  ? lock_is_held_type+0x9e/0x120
[ 1702.948041]  loop_configure+0xc46/0x15a0
[ 1702.948072]  ? __pfx_loop_configure+0x10/0x10
[ 1702.948098]  ? avc_has_extended_perms+0x107/0xf20
[ 1702.948114]  ? find_held_lock+0x2b/0x80
[ 1702.948126]  ? avc_has_extended_perms+0x23b/0xf20
[ 1702.948143]  ? lock_release+0xc8/0x270
[ 1702.948159]  lo_ioctl+0x66d/0x1ca0
[ 1702.948179]  ? __pfx_lo_ioctl+0x10/0x10
[ 1702.948196]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1702.948217]  ? lock_acquire+0x15e/0x2d0
[ 1702.948231]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1702.948246]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1702.948265]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1702.948281]  ? lock_release+0xc8/0x270
[ 1702.948298]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1702.948331]  ? check_irq_usage+0x210/0xb40
[ 1702.948346]  ? __fget_files+0x34/0x3b0
[ 1702.948362]  ? find_held_lock+0x2b/0x80
[ 1702.948373]  ? __fget_files+0x203/0x3b0
[ 1702.948388]  ? __pfx_lo_ioctl+0x10/0x10
[ 1702.948406]  blkdev_ioctl+0x365/0x6d0
[ 1702.948425]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1702.948443]  ? selinux_file_ioctl+0xb9/0x280
[ 1702.948458]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1702.948477]  __x64_sys_ioctl+0x18f/0x210
[ 1702.948492]  do_syscall_64+0xbf/0x420
[ 1702.948505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1702.948517] RIP: 0033:0x7fedf48498d7
[ 1702.948528] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1702.948539] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1702.948551] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf48498d7
[ 1702.948559] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1702.948566] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1702.948574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1702.948581] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1702.948596]  </TASK>
[ 1702.974134] loop3: detected capacity change from 0 to 512
[ 1702.988203] EXT4-fs (loop2): unsupported descriptor size 0
[ 1702.990797] loop4: detected capacity change from 0 to 4132
[ 1703.002769] EXT4-fs (loop4): inodes count not valid: 4043308832 vs 32
[ 1703.009894] loop4: detected capacity change from 0 to 4132
[ 1703.011599] loop1: detected capacity change from 0 to 163840
[ 1703.015859] EXT4-fs (loop4): inodes count not valid: 4043308832 vs 32
20:59:47 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf04a, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1703.040285] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1703.042173] EXT4-fs (loop1): group descriptors corrupted!
[ 1703.043294] loop5: detected capacity change from 0 to 120
[ 1703.054226] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
20:59:47 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000102000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1703.083893] loop1: detected capacity change from 0 to 163840
[ 1703.092250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
20:59:47 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf04b, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1703.135127] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1703.136917] EXT4-fs (loop1): group descriptors corrupted!
[ 1703.138398] loop4: detected capacity change from 0 to 4132
[ 1703.142285] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1703.143059] EXT4-fs (loop4): group descriptors corrupted!
[ 1703.148619] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1703.149400] EXT4-fs (loop4): group descriptors corrupted!
[ 1703.218360] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1703.225683] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1703.242842] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
20:59:55 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b36, &(0x7f0000000140))

20:59:55 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0xa000000}], 0x2, 0x600, 0x0)

20:59:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf065, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

20:59:55 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 30)

20:59:55 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d59660100", 0x1e, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000202000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:55 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:55 executing program 7:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
r1 = getpgrp(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={<r3=>0x0}, &(0x7f0000000600)=0xc)
move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x4209, r1, &(0x7f0000000bc0)={0x8, 0x1, 0x2}, &(0x7f0000000c00)=[{}, {}])
clone3(&(0x7f0000000b40)={0x808000, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0), {0x16}, &(0x7f0000000940)=""/223, 0xdf, &(0x7f0000000a40)=""/159, &(0x7f0000000b00)=[0xffffffffffffffff, r1, r3, 0x0, 0x0], 0x5, {r0}}, 0x58)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={<r5=>0x0}, &(0x7f0000000600)=0xc)
move_pages(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x4209, r5, &(0x7f0000000d00)={0x1, 0x1, 0x2}, &(0x7f0000000d40)=[{}, {}])
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8922, &(0x7f0000000900)={'wlan1\x00'})
r7 = syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0xffffffffffff9c58, 0x5, &(0x7f0000000680)=[{&(0x7f0000000300)="298c470db0e891bf26568f285acfa65d552d5b688f166771d00eaf97edbc33ea9f8ea8d97af32d7dd4f7ab0f431a0bd785c05eb521f7ad41cf5fe6961e4a6e3a9747fa91d7163210216f948e569bb8e3c96d0f02aa1d732a421e2f", 0x5b, 0xed6}, {&(0x7f0000000380)="03670a388f3130e69a0938159959ea29067919f7173dea42d4ef76c0739dee405971a98e8cfbf97107335f42c245ad7c0ebb08e1117469dcfd1f6dbcf3f11622d3c59dbd4462516a48645f52c2516ddd5deb1f42a50b28912b12dfd5d453813a9e8af76ddaef68259f7352f05cd76a58b8026944904554b452a6e74d148f6c1cbb9ba347581875354dc2a7a9288b5cb78da2d4d61eac3dec1f1179ebb1a62dbc76230822", 0xa4, 0x4}, {&(0x7f0000000440)="36e49db3f0e4d8e3276d1589658c77cc568e933467b49c18b8fed9b1b960229bcd3b7c1e55f9b87a14c93b9dd58c4a2b5e88c20908a3547e23d3896b638c1883393b257cbdd007c73d65574e211d9a31e61d9bbdd92cabb701599b00a202c4e78514002ee559dc573b86479506d28525fdae36c0b04be25802758924e81c7f49c7598cb7b5e6f5053e45b24cd18c5c97806e493140280e30d68b7629e96c7e8b728a3268", 0xa4, 0x4}, {&(0x7f0000000500)="d575f9799ed9b9cf34e129640a51704e6c37be0ef7accc5cab35358ca6e2e21b160f737531614e8e34f4833009c59ddb0535d5e4d8a4ac4a8da2aad3c90c9407246bb2173b90d582bbfb6fcbb9e2651ef282fbf96339638e2f2ef2b3b264cfed32a3131901e815e08b20c266438b6b7b9b2992f6a9683da51f550ff5a587ebd27c9ca627f6c2e1e04603da758939c41808ade7f1aeba616b6e54863f1da53919ffba30e8410f8148d6644e902d1dcd8db21ec87af05e42852bd3409d7cc6b0f188bcd6ed64752dee7b2113d7b14fe7968bb011a90be65b6357b85d8db1b7e80ca86f56561791c2ea64cde8f61775d2d309e78a6f2604", 0xf6, 0x3}, {&(0x7f0000000600)="4f05ec4d931739c544d0e6d66b7d5c71a94cb9dc6f7f328f3733a4f93b5a425c228f5b90402734ce6b4aba9d05a6de1b33dddb8c1d43d3b7f4a7fc0a42af8c121a3906b8035442a0cb96c36c60684891", 0x50, 0x2197}], 0x2, &(0x7f0000000700)={[{'wlan1\x00'}, {'/proc/slabinfo\x00'}, {'/proc/slabinfo\x00'}, {'/proc/slabinfo\x00'}, {'wlan1\x00'}, {'\xea$'}, {',\x7f\\!%{-/)\''}, {'/proc/slabinfo\x00'}, {}, {'wlan1\x00'}], [{@uid_eq}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_type={'subj_type', 0x3d, 'wlan1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]})
getdents(r7, &(0x7f0000000800)=""/37, 0x25)

[ 1711.120739] set_capacity_and_notify: 3 callbacks suppressed
[ 1711.120754] loop5: detected capacity change from 0 to 120
[ 1711.124660] loop2: detected capacity change from 0 to 4132
[ 1711.131467] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1711.132212] EXT4-fs (loop2): unsupported descriptor size 0
20:59:55 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b37, &(0x7f0000000140))

[ 1711.149357] loop5: detected capacity change from 0 to 120
[ 1711.157645] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1711.178749] loop4: detected capacity change from 0 to 4132
[ 1711.187151] loop1: detected capacity change from 0 to 196608
20:59:55 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d59660100", 0x1e, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1711.195642] loop3: detected capacity change from 0 to 512
[ 1711.197565] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1711.198347] wlan1: mtu greater than device maximum
[ 1711.199078] EXT4-fs (loop4): group descriptors corrupted!
[ 1711.204310] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1711.206048] EXT4-fs (loop1): group descriptors corrupted!
20:59:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf07a, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1711.222883] loop1: detected capacity change from 0 to 196608
[ 1711.224028] wlan1: mtu greater than device maximum
[ 1711.231725] loop4: detected capacity change from 0 to 4132
[ 1711.237793] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1711.239592] EXT4-fs (loop1): group descriptors corrupted!
[ 1711.244430] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1711.245878] EXT4-fs (loop4): group descriptors corrupted!
[ 1711.254634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1711.270111] loop2: detected capacity change from 0 to 4132
20:59:55 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b3a, &(0x7f0000000140))

20:59:55 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x24efff7f}], 0x2, 0x600, 0x0)

[ 1711.291753] loop5: detected capacity change from 0 to 120
[ 1711.295280] EXT4-fs (loop2): unsupported descriptor size 0
[ 1711.297318] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
20:59:55 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x208, &(0x7f0000000080)=<r0=>0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
io_submit(r0, 0x1, &(0x7f0000001dc0)=[0x0])
io_setup(0x0, &(0x7f00000000c0))
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfdef)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
clock_gettime(0x0, &(0x7f0000000c00)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r1, &(0x7f0000000b40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/224, 0xe0}, {&(0x7f0000000800)=""/61, 0x3d}], 0x7, &(0x7f00000008c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000900)=""/32, 0x20}], 0x1}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/1, 0x1}, {&(0x7f0000000a40)=""/127, 0x7f}], 0x2, &(0x7f0000000b00)=[@rights={{0x1c, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x3, 0x2e8594ef0e9731f, &(0x7f0000000c40)={r3, r4+60000000})
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x66, 0x40, 0x4, 0xa3, 0x0, 0x201, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x9}, 0xa0, 0xfca, 0xc0, 0x3, 0x5, 0x3f, 0x5, 0x0, 0x4, 0x0, 0x80000001}, 0xffffffffffffffff, 0x9, r5, 0x3)

20:59:55 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1711.343210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
20:59:55 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 31)

20:59:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000302000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

20:59:55 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d59660100", 0x1e, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1711.414834] EXT4-fs (loop2): unsupported descriptor size 0
[ 1711.420596] FAULT_INJECTION: forcing a failure.
[ 1711.420596] name failslab, interval 1, probability 0, space 0, times 0
[ 1711.421548] CPU: 1 UID: 0 PID: 12255 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1711.421564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1711.421573] Call Trace:
[ 1711.421577]  <TASK>
[ 1711.421582]  dump_stack_lvl+0xfa/0x120
[ 1711.421609]  should_fail_ex+0x4d7/0x5e0
[ 1711.421626]  ? __kernfs_new_node+0xd3/0x930
[ 1711.421640]  should_failslab+0xc2/0x120
[ 1711.421658]  kmem_cache_alloc_noprof+0x80/0x710
[ 1711.421675]  ? __kernfs_new_node+0xd3/0x930
[ 1711.421687]  __kernfs_new_node+0xd3/0x930
[ 1711.421701]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1711.421716]  ? lock_acquire+0x15e/0x2d0
[ 1711.421733]  ? kernfs_root+0x23/0x2a0
[ 1711.421745]  ? find_held_lock+0x2b/0x80
[ 1711.421757]  ? kernfs_root+0xee/0x2a0
[ 1711.421768]  ? lock_release+0xc8/0x270
[ 1711.421782]  ? lock_is_held_type+0x9e/0x120
[ 1711.421804]  kernfs_new_node+0x13c/0x1e0
[ 1711.421821]  __kernfs_create_file+0x55/0x360
[ 1711.421840]  sysfs_add_file_mode_ns+0x21c/0x430
[ 1711.421853]  ? __pfx_dev_attr_store+0x10/0x10
[ 1711.421875]  internal_create_group+0x662/0xeb0
[ 1711.421892]  ? __pfx_internal_create_group+0x10/0x10
[ 1711.421905]  ? blk_validate_limits+0xc27/0x15c0
[ 1711.421925]  ? lock_is_held_type+0x9e/0x120
[ 1711.421945]  loop_configure+0xc46/0x15a0
[ 1711.421979]  ? __pfx_loop_configure+0x10/0x10
[ 1711.422006]  ? avc_has_extended_perms+0x107/0xf20
[ 1711.422024]  ? find_held_lock+0x2b/0x80
[ 1711.422035]  ? avc_has_extended_perms+0x23b/0xf20
[ 1711.422053]  ? lock_release+0xc8/0x270
[ 1711.422069]  lo_ioctl+0x66d/0x1ca0
[ 1711.422089]  ? __pfx_lo_ioctl+0x10/0x10
[ 1711.422106]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1711.422127]  ? lock_acquire+0x15e/0x2d0
[ 1711.422141]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1711.422156]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1711.422175]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1711.422191]  ? lock_release+0xc8/0x270
[ 1711.422208]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1711.422242]  ? check_irq_usage+0x210/0xb40
[ 1711.422255]  ? __fget_files+0x34/0x3b0
[ 1711.422271]  ? find_held_lock+0x2b/0x80
[ 1711.422282]  ? __fget_files+0x203/0x3b0
[ 1711.422298]  ? __pfx_lo_ioctl+0x10/0x10
[ 1711.422315]  blkdev_ioctl+0x365/0x6d0
[ 1711.422334]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1711.422352]  ? selinux_file_ioctl+0xb9/0x280
[ 1711.422368]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1711.422387]  __x64_sys_ioctl+0x18f/0x210
[ 1711.422401]  do_syscall_64+0xbf/0x420
[ 1711.422414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1711.422427] RIP: 0033:0x7fedf48498d7
[ 1711.422437] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1711.422449] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1711.422473] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf48498d7
[ 1711.422481] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1711.422488] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1711.422495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1711.422502] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1711.422517]  </TASK>
[ 1711.457690] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1711.461573] EXT4-fs (loop1): group descriptors corrupted!
[ 1711.462260] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1711.463142] EXT4-fs (loop4): group descriptors corrupted!
[ 1711.478019] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1711.478710] EXT4-fs (loop4): group descriptors corrupted!
[ 1711.510310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1711.520319] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1711.522325] EXT4-fs (loop1): group descriptors corrupted!
[ 1711.533795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:00:03 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:03 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x208, &(0x7f0000000080)=<r0=>0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
io_submit(r0, 0x1, &(0x7f0000001dc0)=[0x0])
io_setup(0x0, &(0x7f00000000c0))
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfdef)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
clock_gettime(0x0, &(0x7f0000000c00)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r1, &(0x7f0000000b40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/224, 0xe0}, {&(0x7f0000000800)=""/61, 0x3d}], 0x7, &(0x7f00000008c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000900)=""/32, 0x20}], 0x1}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/1, 0x1}, {&(0x7f0000000a40)=""/127, 0x7f}], 0x2, &(0x7f0000000b00)=[@rights={{0x1c, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x3, 0x2e8594ef0e9731f, &(0x7f0000000c40)={r3, r4+60000000})
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x66, 0x40, 0x4, 0xa3, 0x0, 0x201, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x9}, 0xa0, 0xfca, 0xc0, 0x3, 0x5, 0x3f, 0x5, 0x0, 0x4, 0x0, 0x80000001}, 0xffffffffffffffff, 0x9, r5, 0x3)

21:00:03 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf07b, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:00:03 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:03 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b3b, &(0x7f0000000140))

21:00:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000402000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:03 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 32)

21:00:03 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x7fffef24}], 0x2, 0x600, 0x0)

[ 1719.808445] set_capacity_and_notify: 6 callbacks suppressed
[ 1719.808474] loop2: detected capacity change from 0 to 4132
[ 1719.829244] loop5: detected capacity change from 0 to 120
[ 1719.832561] loop1: detected capacity change from 0 to 262144
[ 1719.837208] loop3: detected capacity change from 0 to 512
[ 1719.839381] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1719.849769] loop5: detected capacity change from 0 to 120
[ 1719.853723] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1719.867031] EXT4-fs (loop2): unsupported descriptor size 0
[ 1719.867125] loop4: detected capacity change from 0 to 4132
[ 1719.870885] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1719.872440] EXT4-fs (loop1): group descriptors corrupted!
[ 1719.875886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1719.889024] loop1: detected capacity change from 0 to 262144
[ 1719.892484] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1719.893361] EXT4-fs (loop4): group descriptors corrupted!
[ 1719.901462] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1719.903092] EXT4-fs (loop1): group descriptors corrupted!
21:00:04 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0e2, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1719.914575] loop4: detected capacity change from 0 to 4132
[ 1719.938909] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1719.940386] EXT4-fs (loop4): group descriptors corrupted!
21:00:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 33)

21:00:04 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0xf5ffffff}], 0x2, 0x600, 0x0)

[ 1719.950334] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:00:04 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:04 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b3c, &(0x7f0000000140))

[ 1719.991515] loop5: detected capacity change from 0 to 120
[ 1719.999410] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
21:00:04 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1720.013907] loop5: detected capacity change from 0 to 120
[ 1720.031106] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1720.035710] EXT4-fs (loop2): unsupported descriptor size 0
[ 1720.057751] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1720.063223] EXT4-fs (loop1): group descriptors corrupted!
[ 1720.070920] FAULT_INJECTION: forcing a failure.
[ 1720.070920] name failslab, interval 1, probability 0, space 0, times 0
[ 1720.071891] CPU: 1 UID: 0 PID: 12303 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1720.071907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1720.071915] Call Trace:
[ 1720.071920]  <TASK>
[ 1720.071925]  dump_stack_lvl+0xfa/0x120
[ 1720.071955]  should_fail_ex+0x4d7/0x5e0
[ 1720.071972]  ? __kernfs_new_node+0xd3/0x930
[ 1720.071985]  should_failslab+0xc2/0x120
[ 1720.072004]  kmem_cache_alloc_noprof+0x80/0x710
[ 1720.072021]  ? __kernfs_new_node+0xd3/0x930
[ 1720.072032]  __kernfs_new_node+0xd3/0x930
[ 1720.072047]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1720.072061]  ? lock_acquire+0x15e/0x2d0
[ 1720.072077]  ? kernfs_root+0x23/0x2a0
[ 1720.072089]  ? find_held_lock+0x2b/0x80
[ 1720.072100]  ? kernfs_root+0xee/0x2a0
[ 1720.072112]  ? lock_release+0xc8/0x270
[ 1720.072126]  ? lock_is_held_type+0x9e/0x120
[ 1720.072147]  kernfs_new_node+0x13c/0x1e0
[ 1720.072164]  __kernfs_create_file+0x55/0x360
[ 1720.072182]  sysfs_add_file_mode_ns+0x21c/0x430
[ 1720.072195]  ? __pfx_dev_attr_store+0x10/0x10
[ 1720.072217]  internal_create_group+0x662/0xeb0
[ 1720.072234]  ? __pfx_internal_create_group+0x10/0x10
[ 1720.072247]  ? blk_validate_limits+0xc27/0x15c0
[ 1720.072267]  ? lock_is_held_type+0x9e/0x120
[ 1720.072286]  loop_configure+0xc46/0x15a0
[ 1720.072317]  ? __pfx_loop_configure+0x10/0x10
[ 1720.072343]  ? avc_has_extended_perms+0x107/0xf20
[ 1720.072361]  ? find_held_lock+0x2b/0x80
[ 1720.072372]  ? avc_has_extended_perms+0x23b/0xf20
[ 1720.072389]  ? lock_release+0xc8/0x270
[ 1720.072405]  lo_ioctl+0x66d/0x1ca0
[ 1720.072426]  ? __pfx_lo_ioctl+0x10/0x10
[ 1720.072442]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1720.072463]  ? lock_acquire+0x15e/0x2d0
[ 1720.072478]  ? __virt_addr_valid+0x1c6/0x5d0
21:00:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000502000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:04 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0xfffffff5}], 0x2, 0x600, 0x0)

[ 1720.072492]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1720.072511]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1720.072527]  ? lock_release+0xc8/0x270
[ 1720.072544]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1720.072578]  ? check_irq_usage+0x210/0xb40
[ 1720.072591]  ? __fget_files+0x34/0x3b0
[ 1720.072608]  ? find_held_lock+0x2b/0x80
[ 1720.072619]  ? __fget_files+0x203/0x3b0
[ 1720.072635]  ? __pfx_lo_ioctl+0x10/0x10
[ 1720.072652]  blkdev_ioctl+0x365/0x6d0
[ 1720.072672]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1720.072689]  ? selinux_file_ioctl+0xb9/0x280
[ 1720.072704]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1720.072723]  __x64_sys_ioctl+0x18f/0x210
[ 1720.072738]  do_syscall_64+0xbf/0x420
[ 1720.072751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1720.072764] RIP: 0033:0x7fedf48498d7
[ 1720.072774] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1720.072786] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1720.072798] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf48498d7
[ 1720.072806] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1720.072813] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1720.072821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1720.072827] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1720.072842]  </TASK>
[ 1720.138573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1720.146487] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1720.148150] EXT4-fs (loop1): group descriptors corrupted!
[ 1720.150461] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1720.151844] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1720.153398] EXT4-fs (loop4): group descriptors corrupted!
[ 1720.187882] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1720.189298] EXT4-fs (loop4): group descriptors corrupted!
21:00:12 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0e3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:00:12 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000602000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:12 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 34)

21:00:12 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:12 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b3d, &(0x7f0000000140))

21:00:12 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9040000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:12 executing program 7:
prctl$PR_CAPBSET_DROP(0x18, 0x27)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x1, 0x9e, 0x7, 0xc0, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x40, 0x8ab}, 0xc0, 0x80, 0x5, 0x0, 0x1ff, 0xfffffffa, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x3)
lremovexattr(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6f73322e6e6c383032313100d70e337779a534f73be04a461c3dd6e2294b409d137641510f8fb031f9eb927ab06fb661b9b0061202cf9601238b70af26415bc38dd1844d7bc4943339808aa0bb6a494f75a8c0592051b8c6529e6679f9bc"])
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file2\x00'})
dup2(r0, r1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
getgroups(0x2, &(0x7f0000000480)=[<r2=>0x0, 0x0])
fstat(r0, &(0x7f00000005c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000008600)=0xc)
syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x181030, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRESHEX=r3, @ANYBLOB="2c064c4447c640bef951b551281f4330e4f1477e89e2940cb106d021d316fb5419"])
getgroups(0x2, &(0x7f0000000100)=[r2, r3])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r5 = dup(r4)
sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0)
getsockname$unix(r5, &(0x7f00000004c0), &(0x7f0000000300)=0x6e)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

21:00:12 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x7ffffffff000}], 0x2, 0x600, 0x0)

[ 1728.472540] set_capacity_and_notify: 6 callbacks suppressed
[ 1728.472567] loop5: detected capacity change from 0 to 120
[ 1728.476028] loop2: detected capacity change from 0 to 4132
[ 1728.480288] loop3: detected capacity change from 0 to 512
[ 1728.484260] EXT4-fs (loop2): unsupported descriptor size 0
[ 1728.504453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:00:12 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x6000000000000}], 0x2, 0x600, 0x0)

[ 1728.511341] loop1: detected capacity change from 0 to 264192
21:00:12 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1728.525808] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1728.527841] loop4: detected capacity change from 0 to 4132
[ 1728.539135] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1728.540608] EXT4-fs (loop1): group descriptors corrupted!
[ 1728.544126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1728.556556] loop5: detected capacity change from 0 to 120
[ 1728.569647] FAULT_INJECTION: forcing a failure.
21:00:12 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 35)

[ 1728.569647] name failslab, interval 1, probability 0, space 0, times 0
[ 1728.570837] CPU: 1 UID: 0 PID: 12341 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1728.570853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1728.570861] Call Trace:
[ 1728.570865]  <TASK>
[ 1728.570870]  dump_stack_lvl+0xfa/0x120
[ 1728.570896]  should_fail_ex+0x4d7/0x5e0
[ 1728.570913]  ? __kernfs_new_node+0xd3/0x930
[ 1728.570926]  should_failslab+0xc2/0x120
[ 1728.570944]  kmem_cache_alloc_noprof+0x80/0x710
[ 1728.570966]  ? __kernfs_new_node+0xd3/0x930
[ 1728.570978]  __kernfs_new_node+0xd3/0x930
[ 1728.570992]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1728.571007]  ? lock_acquire+0x15e/0x2d0
[ 1728.571024]  ? kernfs_root+0x23/0x2a0
[ 1728.571035]  ? find_held_lock+0x2b/0x80
[ 1728.571047]  ? kernfs_root+0xee/0x2a0
[ 1728.571059]  ? lock_release+0xc8/0x270
[ 1728.571072]  ? lock_is_held_type+0x9e/0x120
[ 1728.571094]  kernfs_new_node+0x13c/0x1e0
[ 1728.571111]  __kernfs_create_file+0x55/0x360
[ 1728.571130]  sysfs_add_file_mode_ns+0x21c/0x430
[ 1728.571143]  ? __pfx_dev_attr_store+0x10/0x10
[ 1728.571165]  internal_create_group+0x662/0xeb0
[ 1728.571182]  ? __pfx_internal_create_group+0x10/0x10
[ 1728.571195]  ? blk_validate_limits+0xc27/0x15c0
[ 1728.571216]  ? lock_is_held_type+0x9e/0x120
[ 1728.571235]  loop_configure+0xc46/0x15a0
[ 1728.571266]  ? __pfx_loop_configure+0x10/0x10
[ 1728.571291]  ? avc_has_extended_perms+0x107/0xf20
[ 1728.571310]  ? find_held_lock+0x2b/0x80
[ 1728.571321]  ? avc_has_extended_perms+0x23b/0xf20
[ 1728.571338]  ? lock_release+0xc8/0x270
[ 1728.571354]  lo_ioctl+0x66d/0x1ca0
[ 1728.571374]  ? __pfx_lo_ioctl+0x10/0x10
[ 1728.571391]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1728.571412]  ? lock_acquire+0x15e/0x2d0
[ 1728.571426]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1728.571441]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1728.571460]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1728.571476]  ? lock_release+0xc8/0x270
[ 1728.571492]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1728.571527]  ? check_irq_usage+0x210/0xb40
[ 1728.571543]  ? __fget_files+0x34/0x3b0
[ 1728.571561]  ? find_held_lock+0x2b/0x80
[ 1728.571572]  ? __fget_files+0x203/0x3b0
[ 1728.571588]  ? __pfx_lo_ioctl+0x10/0x10
[ 1728.571606]  blkdev_ioctl+0x365/0x6d0
[ 1728.571625]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1728.571643]  ? selinux_file_ioctl+0xb9/0x280
[ 1728.571658]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1728.571677]  __x64_sys_ioctl+0x18f/0x210
[ 1728.571692]  do_syscall_64+0xbf/0x420
[ 1728.571705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1728.571718] RIP: 0033:0x7fedf48498d7
[ 1728.571728] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1728.571740] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1728.571752] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf48498d7
[ 1728.571761] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1728.571768] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1728.571775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1728.571782] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1728.571797]  </TASK>
[ 1728.574936] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1728.578033] loop3: detected capacity change from 0 to 512
[ 1728.578517] EXT4-fs (loop4): group descriptors corrupted!
[ 1728.622678] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1728.625860] loop1: detected capacity change from 0 to 264192
[ 1728.633570] loop2: detected capacity change from 0 to 4132
[ 1728.644162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1728.647009] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1728.647905] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1728.648673] EXT4-fs (loop1): group descriptors corrupted!
[ 1728.653230] loop4: detected capacity change from 0 to 4132
21:00:12 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b40, &(0x7f0000000140))

[ 1728.666918] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1728.667809] EXT4-fs (loop4): group descriptors corrupted!
21:00:12 executing program 7:
semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000180)=""/180)
semget$private(0x0, 0x4, 0x8e)
semget(0x3, 0x2, 0x328)
semget(0x0, 0x2, 0x81)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/228, 0xe4}], 0x1, 0x1, 0x0)

21:00:12 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0e4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1728.720634] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1728.786174] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1728.796207] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
21:00:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0e5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:00:22 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x8000000000000}], 0x2, 0x600, 0x0)

21:00:22 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b41, &(0x7f0000000140))

21:00:22 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:22 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 36)

21:00:22 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:22 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000702000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:22 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x1f, @mcast2, 0x2}, 0x1c)
pkey_mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = pidfd_open(0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000140)=0x850)

[ 1738.572535] set_capacity_and_notify: 2 callbacks suppressed
[ 1738.572552] loop5: detected capacity change from 0 to 120
[ 1738.577826] loop4: detected capacity change from 0 to 4132
[ 1738.578868] loop1: detected capacity change from 0 to 264192
[ 1738.586481] loop2: detected capacity change from 0 to 4132
[ 1738.588030] loop3: detected capacity change from 0 to 512
[ 1738.591628] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1738.599126] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1738.599860] EXT4-fs (loop4): group descriptors corrupted!
[ 1738.605150] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1738.606653] EXT4-fs (loop1): group descriptors corrupted!
[ 1738.610252] loop5: detected capacity change from 0 to 120
[ 1738.610697] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1738.613175] loop4: detected capacity change from 0 to 4132
[ 1738.619996] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1738.621397] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1738.622184] EXT4-fs (loop4): group descriptors corrupted!
[ 1738.630827] loop1: detected capacity change from 0 to 264192
21:00:22 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
dup(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@appraise_type}, {@appraise_type}]}})

[ 1738.642055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1738.650089] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
21:00:22 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b44, &(0x7f0000000140))

[ 1738.651709] EXT4-fs (loop1): group descriptors corrupted!
21:00:22 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000b02000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:22 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x12c5e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1738.682433] loop4: detected capacity change from 0 to 4132
[ 1738.684778] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1738.685612] EXT4-fs (loop4): group descriptors corrupted!
[ 1738.692326] loop4: detected capacity change from 0 to 4132
[ 1738.694238] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1738.695001] EXT4-fs (loop4): group descriptors corrupted!
21:00:22 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x10000000000000}], 0x2, 0x600, 0x0)

[ 1738.739254] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 1738.743923] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 1738.812173] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:00:31 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:31 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
dup(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@appraise_type}, {@appraise_type}]}})

21:00:31 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0xf0ffffff7f0000}], 0x2, 0x600, 0x0)

21:00:31 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:00:31 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b45, &(0x7f0000000140))

21:00:31 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 37)

21:00:31 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:31 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001802000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1747.479791] set_capacity_and_notify: 2 callbacks suppressed
[ 1747.479807] loop2: detected capacity change from 0 to 4132
[ 1747.506310] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1747.514896] loop1: detected capacity change from 0 to 264192
[ 1747.519841] loop5: detected capacity change from 0 to 256
[ 1747.525973] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1747.526820] EXT4-fs (loop1): group descriptors corrupted!
[ 1747.530373] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (32 blocks)
[ 1747.543478] loop5: detected capacity change from 0 to 256
[ 1747.546815] loop4: detected capacity change from 0 to 4132
[ 1747.547935] FAULT_INJECTION: forcing a failure.
[ 1747.547935] name failslab, interval 1, probability 0, space 0, times 0
[ 1747.548908] CPU: 1 UID: 0 PID: 12423 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1747.548924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1747.548931] Call Trace:
[ 1747.548936]  <TASK>
[ 1747.548941]  dump_stack_lvl+0xfa/0x120
[ 1747.548976]  should_fail_ex+0x4d7/0x5e0
[ 1747.548994]  ? __kernfs_new_node+0xd3/0x930
[ 1747.549007]  should_failslab+0xc2/0x120
[ 1747.549024]  kmem_cache_alloc_noprof+0x80/0x710
[ 1747.549041]  ? __kernfs_new_node+0xd3/0x930
[ 1747.549053]  __kernfs_new_node+0xd3/0x930
[ 1747.549067]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1747.549082]  ? lock_acquire+0x15e/0x2d0
[ 1747.549098]  ? kernfs_root+0x23/0x2a0
[ 1747.549110]  ? find_held_lock+0x2b/0x80
[ 1747.549122]  ? kernfs_root+0xee/0x2a0
[ 1747.549134]  ? lock_release+0xc8/0x270
[ 1747.549147]  ? lock_is_held_type+0x9e/0x120
[ 1747.549169]  kernfs_new_node+0x13c/0x1e0
[ 1747.549186]  __kernfs_create_file+0x55/0x360
[ 1747.549205]  sysfs_add_file_mode_ns+0x21c/0x430
[ 1747.549218]  ? __pfx_dev_attr_store+0x10/0x10
[ 1747.549239]  internal_create_group+0x662/0xeb0
[ 1747.549257]  ? __pfx_internal_create_group+0x10/0x10
[ 1747.549269]  ? blk_validate_limits+0xc27/0x15c0
[ 1747.549290]  ? lock_is_held_type+0x9e/0x120
[ 1747.549309]  loop_configure+0xc46/0x15a0
[ 1747.549340]  ? __pfx_loop_configure+0x10/0x10
[ 1747.549366]  ? avc_has_extended_perms+0x107/0xf20
[ 1747.549385]  ? find_held_lock+0x2b/0x80
[ 1747.549396]  ? avc_has_extended_perms+0x23b/0xf20
[ 1747.549413]  ? lock_release+0xc8/0x270
[ 1747.549429]  lo_ioctl+0x66d/0x1ca0
[ 1747.549449]  ? __pfx_lo_ioctl+0x10/0x10
[ 1747.549466]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1747.549487]  ? lock_acquire+0x15e/0x2d0
[ 1747.549501]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1747.549516]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1747.549534]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1747.549550]  ? lock_release+0xc8/0x270
[ 1747.549567]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1747.549601]  ? check_irq_usage+0x210/0xb40
[ 1747.549615]  ? __fget_files+0x34/0x3b0
[ 1747.549631]  ? find_held_lock+0x2b/0x80
[ 1747.549642]  ? __fget_files+0x203/0x3b0
[ 1747.549658]  ? __pfx_lo_ioctl+0x10/0x10
[ 1747.549675]  blkdev_ioctl+0x365/0x6d0
[ 1747.549695]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1747.549713]  ? selinux_file_ioctl+0xb9/0x280
[ 1747.549728]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1747.549747]  __x64_sys_ioctl+0x18f/0x210
[ 1747.549762]  do_syscall_64+0xbf/0x420
[ 1747.549775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1747.549788] RIP: 0033:0x7fedf48498d7
[ 1747.549798] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1747.549810] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1747.549822] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf48498d7
[ 1747.549830] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1747.549837] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1747.549844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1747.549851] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1747.549866]  </TASK>
[ 1747.588471] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (32 blocks)
[ 1747.589887] loop1: detected capacity change from 0 to 264192
[ 1747.595322] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1747.596165] EXT4-fs (loop1): group descriptors corrupted!
21:00:31 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b41, &(0x7f0000000140))

21:00:31 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1747.611073] loop3: detected capacity change from 0 to 512
[ 1747.647060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1747.658834] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1747.660329] EXT4-fs (loop4): group descriptors corrupted!
21:00:31 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x30000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:00:31 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x100000000000000}], 0x2, 0x600, 0x0)

21:00:31 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b46, &(0x7f0000000140))

21:00:31 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1747.704509] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:00:31 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:31 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 38)

[ 1747.718495] loop5: detected capacity change from 0 to 384
[ 1747.723542] loop4: detected capacity change from 0 to 4132
[ 1747.732131] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (48 blocks)
[ 1747.733934] loop1: detected capacity change from 0 to 264192
[ 1747.734916] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1747.735828] EXT4-fs (loop4): group descriptors corrupted!
[ 1747.740161] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1747.741096] EXT4-fs (loop1): group descriptors corrupted!
[ 1747.752388] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1747.761071] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (48 blocks)
[ 1747.763565] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1747.764417] EXT4-fs (loop1): group descriptors corrupted!
21:00:31 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0xf0ffffff7f0000}], 0x2, 0x600, 0x0)

21:00:31 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40002, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:00:31 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001c02000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:31 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:31 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b47, &(0x7f0000000140))

[ 1747.843224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1747.869636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1747.920405] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1747.922185] EXT4-fs (loop1): group descriptors corrupted!
[ 1747.935783] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1747.936650] EXT4-fs (loop4): group descriptors corrupted!
[ 1747.941770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1747.946118] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1747.947845] EXT4-fs (loop1): group descriptors corrupted!
[ 1747.950893] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1747.951850] EXT4-fs (loop4): group descriptors corrupted!
[ 1747.993119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:00:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 39)

21:00:40 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40003, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:00:40 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:40 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
fstat(r0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002600)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000002700)=0xe8)
syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x5, 0x5, &(0x7f0000002500)=[{&(0x7f0000000240)="fa6a7d646767a7e0907411b95fec8e5f7b6da4fb7e618a94d68c9065e14b341ae192bf749ff7ddea6fee2240d0299e23beb613d9ace1ca9bca5fa4f67c8a271b81415c36cf3d8e46b337c8b575476e464a4b31c7dfff525fa9fef9d1eeee01c63feb5e7e8b6b636622be2c7fc89852fecb48b777b60421966784b5695d0ab480555ac27101059bdaffa725f02e26b005ead75ff79d6b37027cb59983f57ce0de86b3d67d5bd65d67a61787cc90825b522a72da5cbd1a391cf3d711dab224f92cba50be71472fd832da644a17a5c1dc2d172871556ce16f49fe40ea4bd828dea7c39d73ac", 0xe4, 0x9}, {&(0x7f0000000400)="b813bcf3a25e5c95f4dfb838766eade45b9c1f9ddf690e01452425c48db98782a9abebc16127a93c43e36a2ed061c2825e8d96db535fee1b23df17d6fbdbb861c07c86f6eb6a4df760da505d2b05bc683fd620cddaf84ad9aafeeb7ca109a1fb045044f2b13ae2295271fbe2cade7b5892363187f05d3168d433bbefa213ed60aa8fae83ff3b0a149c7de4657a514a810a8f854ba042e3f9fda467cc6d576774cbbfc7420e2f2c20771e382110645c928c463fb81c2313679c4ebd43ea942093fd106e48d11f9ae32cd398be69639a0f7c0aadcff072474a1c4385fecf7f705670aa039aa5da614f9485e816ad5c9552356967df8257e1df81cfb37d5986ea01666cb049bd2c88972b04b61a0ad657b3a3e935b4cb670bc67ce6b38cb8be509ae2ad7d60accb703a752be456e6d4b1b6ec3b6272a53c95218bff735bd7a61361a96daf7606dc9f43fa6024dfb2f467122f2afc8e7c7074d99e71b17c8e26ff9d95b9e5af8bed0b6d360bfe3288a5538e38224c29ed1bb84691b918db733fef34b77ec491025e022de735bd4fc52fa45341f5c3c96492fb7fb4945acfd468738b52332ea80a5656bca6df6f0296cdfc5df055e7e3c44f8c63efb4ac7ed4472d1207d4b485036754db469ca11cede88ef182ec123488bd7e186e9737fee1279019d8155dac9a3829be0121641c655334d9b47b5e84f0ff9cd2519921c215548286815c196cca59b7d97ded06b6f90e206df6e34c8fd0710206f301611ec1225d2443254488df3d4167839620cf7f90d02a4c07a6aa1bfc89e182a40416304a1ec85cae17908aceaeeb8e6d6ebd5a17905e3ad14b5639a44f4ccc1e2fff9ed1aa2026eb1d9eedd90569b856aa28eb3b0a5a3ab556c4199aef50925cd08bec1027fc3923e3ad509757fc29fce8e93d36c24ec14e5a17f0f079260cfe0cb92b7d9164cfc8ecaf33b2895b5a04f186d491d1b362720008a0543001bb925b100b38c901ae3548981ea679ded4eb97765c50a0bf48395ba5e335d0290e018b4330da493880316f117093d11a9652fdb1502ca99aa95d61fdee7d32276368edd274cdc800997bbd6db31d1f13f08abb312772e70fcdc1143590dec153273a31f04a19a21d7e642b1eae6a542fd98bbfca825b31da2ff1f434fa26885eab0995f04ef0e740d550a24b857c4c1e676abbb173c69c5431c48d99e86bae30ba41eac7434419f7cbeb1b0983c23b7a5082393ad6f6854d095ca0e805f89f824f6be363e63bd6ed07b816039089d4657c76b2b6609dc613379c9589eae6b8e3fb9d57bf9050986bbb70c561f49034748630debead938fc08ecb566820a78b27cd0c807fadd32f666c47228cf6abc2660db9c4e3b65fc60123fa5f36b4d7ec0b98edc70bb54c84573e0cca5d03e562b75ecc515073d42d8a2e44fad4a46b1285aef121d21ac4b7fbcdd7066b54453ad907d26b84a0702bb855815f82bd40800fc89c0890785484efe38147179de5b907f0c8571ed9d90b24099099b3db2c83c3c6108aa1f1127409ef8d9d8f6c24e48a7f1025fb4382ca9cbc33d4924b214f9db7882dd005f64c1eb04a3058f39f442b1dc1f7e4d663b210da187aeb7a86c82e7bb1a0fa5c331bc8734de47f2647602219703a62f3b76622f4ae6231ff196b5709808de3017f6523c24f2d1f5799d146516a5ab1d721afd23d06c7ff0543dc0092b6307d8f57b3b6acac6a44422510437e77346cbbb82e691cc30c3c26e6fc54c3dd44b0f3dd5b002506a8b0cd0cd3150780d60441789a46a59824bb4e7c0b6eb66a867cce0438fd521af32e862ec76d8aa078f663eb77196ecedfa7c08446f56b62e277bc6a71d9ee9e1a7d28361e54fa5f1365e01813cc293e262a4d6e0ec8097b0c87f922118b5579a20947ad471915c4c2dbcd9aac1e66518b8c0d9f4c48f26ce299c90b82641879a188af6a35402773b95443ed0519dfc480c136b4f36c654fb242fd7880307506362956ceb5a2ba3b7b22558d0d4bba6882dea6aea50c2baf608853dbf73b7396fae7ae4b38d2c2c43100a99ed397e74fe8158a06ca8c873b319df5f1187abd580f4bc141be2d83cbf0067314a5bc124d95703de1a860ae61da1ba791a5362132c79cc5fa4b78ca7594a54ebaf1939dba8f939685f0cfb35e406755d9e356b76bfa194c83f0929f9429330f5ec4c7c9a98314d6125595790b1f25ca9252e460915ad65382eb53ae304699d6826b94d44dd4ce541441b642c26ac9b2647051d9f49c2a10af266c955acc7f5b27ad40cf4f4e46755933f60b3796dc9f84967af56dbcdfd14778531a5ef0830af4c4d8e577fc5ec8307afddd300332a9c7dce89b27dc1ea6f0bbe334bd6d8c1b089c8ac00eba1256da917cb245dc6d35ca97fdd857f7ef038b38251c50aba40b1d77b36f47294509fde9ef5bef9537f6f6bc83e118a8dbb5cf31e74d7f200700a701f39238448ad18a703ade24c64d398fdd180af6cdbbb89d03c1d1e9c4ced20eb39ae48463c6b6315255f957589524b3ddb3e2cadae72c68cc41390d0f178804ac205c7e6a005c29848348cf12b98bc314717334eec539e755d40cae77dadef8fc6ea86ccd80bc4fd6ae31f3e13a763183909b7cfda1db282a483719c6ac414dab16eafeb0eba71c1edcd71bd79b849424005ac37ed5743dc7bd96832efac7179d0548d5147c64183ce4b5fdd5aded7bceb376fff42494e685755df096e34bbc940527c251298db4b8c55f414467ae2d94f104621801bf9df3a7407521a908e2e9fe4e64e3048e4fd32b91ffea74b08e818f2d10cfd9b03f3d11631544d925fc109c4862d9df8fa83b973700c11d8081d776fac9619b59872c2b755a461cda47da98818cd5736a5da92f71327118a9ca492631df6b1212ee04141a2b580233f74bc403cadf65edf6f4537d6baa0508a17f69796cca2b421b56074f39d685ce318026bf08a42ba6e2470436e6c91f6b832e1da16f09937b07c8a123c6982ff468c5204b2a109427cbf7dda777801b8525a36281e517fc6e97aebd71004ee7f9485beeaaddd754e7cad240c8b5a8f98d1afbfe96a3ac67ff4f6ceb14fb96ab305910a3004acd4939d69dc737c7ba4948bc0e6efac3ec62d8b3204d202bc19f8e5c6d644153a98d5bf293ffdfd751c02e9f5cdf6b0b44b54b06a2ed898282f46975666706296e98092b3c1a426647eda102e5acc324807fcf4b8c7054a58cdd261c0c9885b4dbb775ea03df7152c87ce77245b3ef787cd8fea382c6801cd67d35207db96e5b25750ffcde5f04b0634ff9f07b2cdcaba695341fde41d29d73abac099412a1bef69cb6b255352b15861015ac4a8a1d8cc45cc9aaa419edfab49b2d1f1e13a10536bfc4cd5dc2f97c5bbde3d21ba7eb25123cfcf30c31eab68e0820324600e1ebe57426f21bf68d83b9daab0dbace2298a3113b3d9fdfef3f8f86f18989a36b632368b7d6fe9ddff5350dddb3e9ac20feeca871641fd4e0fd73fb97f3d2f96daaaf937ef790f868f7c64533b35dc827c0281ecb22b029820ed119d8cca4a5b57f88a8cd88ea58ea5f2f6f703828dd66fb4e037f8ea09a0bd94a93aa36080c6e154e0e338710ebb1980c3b0aba0e11fa9db69b556992445492fcd05ed0709317d37c0a28d1cf14c56b90860bb7b0abc93e34d5b54d0d41744889884b098cc38fb58b363e6fb6154294bbf32d84808fdc03594f23e2decb9072326057f044cb17f2ff2fba72d9154b5f125e66774650f20d1748adc8e177ed517f8fb42e961f72cb8aff33f046899c95bb97a9a09bbf6dab1727907cfa6a2f6309880b2b3479d7c7c449f48341d5c5b85ffb0a20a62a1374f69e707f77226378252a75a2d435d7309213746941c64b6119f9213a5654de84a61d2b2cb401f8b7dfbf8e8fa107a6ff1510e89e6378df2b075e33d3ca3a4861e787f83974ff53800b60c981db2928344587da1c56d761c622924fb8a402d05b7727c154d5301772389a97781e5064a42b118ee868721ba5532a70bbafdb9e5c89c811cabe59974760fafc721eb7d538d63d00f26850a7bc362a8a30b550e710355a81cae00bbbce71e110391c0543b8bace3a27c1501d58ee19d39ca3334393cbfed33d385a3121dd487fe331b4ab178327458c28e52750a1797f2f5b73cb1860bf1e123219260f4168a13eb23d7e6447cddae5b22580b6741e3456b551069c248df4989c2fd07a548d1a2934482f4934ba6ccd41709ebf3508fc914abf5ae96d8f06809a2c7dda6a3a2b673a373fc3f9cc1046234185b2928acd485dc3a04911504e887d52b86fb2f8e7bc77359d6cc99e5df6d754f5898de813b22efc2814ddb6ebf9f137d5d4c2ba8622b111ac7feff61e514c3d28ddb86c4ef44146118dc2f7343e12eb80edbe2bf61461645b26045651fc22a8b8c7b7d032244f85b3243c55cca18c7429f250e060923d2466361e68e191b591a3c7097c9c1f4b17a3f9530f37cd6c15e219294de94330bb07c09ef3cfa251fec5c2a8e8002f8ffbf3dfed387453cd9d2eb1d9ec820cf2ea29564e9e2fd52874aee2036eec21ce8f41d7b46bb0b8b04298b217cb0f7821cd4405cbde00ceade88fe3d8ba04607a26554792e2834d452fc21e4fea3693b0bc8ae5e9a07f4d0a36c2387114dac727a8e357ea89490ab153a58e3a9eb501c2358a649205d48f5d430b176abd198ee78baa930b3a1dd4183bcc1ab4038be7e8052cbb28511f2dbf3d98efcee3f4dc769096539d1a22d25245f5079d46fbeffce746269eaa9597b7f116874bf2ffc14eaac642aefc90c5fb7629c32780520e4e78b9f8ab16722278ed3a4c84a09905950d7fde5ddfbdb6c2cc04dc62a0f5bb70afbbce0be2f8a04087bb36439908991ecf179088afbe8efce94525bda45b1fe76533ca1dee2adda3755a64db641d385ddafb5eb0d0680fe0e34220c314a808271147fba6ef937208cd9a86cbea68b2ab656010039e1c3828df0a6c2b589e3515253ed86ed76eac336c7f6397cf1991077cd5eaa407b3b267304603a113528d05a50c2b25c56ffb30310919ad6ef46b52c8d1aef1879e71bf2ebd5fa485e74dd717d4de4e77075f45b7fb0222b194d5a743ee9a4a2fd1ba5a3c180229f94a2f14b6539020ae614614d8f788926b8f59b29c305877ec3312ea7061c98033af76f7ec168fe00bf26719f100b7ac3b33810a768c96af971063594dc2fc060bc24b17418d6ed47b310af4eaaabc48b0953602813d7dc53f210b8bc0747a613aad6afd7af61ce6d9ace136b4b0fdf6efc9aaa49a89701fea8fb651cd67aa453cf65a5dc41019c792621ea184aa4c9d5f33f31fca0b9b0bddbcff88ebe7c3d4b52d996eb325fe03d3416d37eda2b2552c872e3108052c11e22a3b49611e59501adc0c7c30d22488d4dddb2615124a728d34201c467cc096d57e1f3dc8e420e5bce6153897ce9d8df1554b594e11961aa9e661742c5e66c0d1c54c8e08d54aec594445923128d73ac97cdbf11c75891604c171d7f70d3e1969b91299ba663226486c518e3d01c35e4b7c9155f587cb8699c29601a18021cafee00ba2e60bb4ba38221b863731b5e8cec5cfa1f23c90dffbe739dbae942a89f74d844feaf2480344a0921d48a7db285bd7d8fda248c06c61fbfc14c4bca419779fa8576078d87e49fe18225d923487920c08a38b1aec4bdf428b68dca26ef9854924eba5610ded921aa3a3db99177d047efd8743222a5ddc4e4c688643adaec2613d577d135f57b04b6e9364d2231b3bbfcdb0a3c6fabd6e533ae777", 0x1000, 0x2}, {&(0x7f0000001400)="6936d65e1b965b32644123af2a4887edd84faf0a4e6f927b98a7d23ca92a7d2b63bb3defb8dffb87b305cc3d2e7ef8b90e6c6d1a06eb4cc1671bcddfee7be40c3720169c6991c617e32233038865e944a2d314a11ab3bf1960ecf34afcbd3bbf13552c516ee799aed680ce98d15e25c29de82e664e0dca5e75d17be4ba881f0cb9f4668a292bfbf02f3eb4d8eb3d625c477285b3929d522f4ea11fc75b6dc1485e6bc8f41cd8f2e92a539daf0bdeb99958172513b1ca088eaff441cc97f6", 0xbe, 0x5}, {&(0x7f00000014c0)="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", 0x1000, 0x7fffffff}, {&(0x7f00000024c0)="7a0168d390ce7b", 0x7, 0x5}], 0x8e2001, &(0x7f0000002740)={[{@huge_always}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x37, 0x31, 0x6d, 0x35]}}, {@huge_never}, {@huge_advise}, {@gid={'gid', 0x3d, r1}}, {@uid={'uid', 0x3d, r2}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@mpol={'mpol', 0x3d, {'default', '=relative', @void}}}], [{@seclabel}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]})
lseek(r0, 0x2, 0x0)
perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x1, 0x2, 0x9, 0x9, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x80000001, 0x5}, 0x40008, 0x45, 0x2, 0x5, 0x7, 0x0, 0x40, 0x0, 0xfffffb53, 0x0, 0x1ff}, 0xffffffffffffffff, 0x10004, r0, 0x3)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'team0\x00', {'gre0\x00'}, 0x9})
pipe2(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
faccessat(r5, &(0x7f0000002800)='./file0\x00', 0x8)

[ 1755.974880] FAULT_INJECTION: forcing a failure.
[ 1755.974880] name failslab, interval 1, probability 0, space 0, times 0
[ 1755.975919] CPU: 1 UID: 0 PID: 12468 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1755.975936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1755.975945] Call Trace:
[ 1755.975953]  <TASK>
[ 1755.975958]  dump_stack_lvl+0xfa/0x120
[ 1755.975986]  should_fail_ex+0x4d7/0x5e0
[ 1755.976005]  ? __kernfs_new_node+0xd3/0x930
[ 1755.976019]  should_failslab+0xc2/0x120
[ 1755.976037]  kmem_cache_alloc_noprof+0x80/0x710
[ 1755.976055]  ? __kernfs_new_node+0xd3/0x930
[ 1755.976067]  __kernfs_new_node+0xd3/0x930
[ 1755.976081]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1755.976096]  ? lock_acquire+0x15e/0x2d0
[ 1755.976114]  ? kernfs_root+0x23/0x2a0
[ 1755.976126]  ? find_held_lock+0x2b/0x80
[ 1755.976138]  ? kernfs_root+0xee/0x2a0
[ 1755.976150]  ? lock_release+0xc8/0x270
[ 1755.976164]  ? lock_is_held_type+0x9e/0x120
[ 1755.976186]  kernfs_new_node+0x13c/0x1e0
[ 1755.976203]  __kernfs_create_file+0x55/0x360
[ 1755.976222]  sysfs_add_file_mode_ns+0x21c/0x430
[ 1755.976236]  ? __pfx_dev_attr_store+0x10/0x10
[ 1755.976259]  internal_create_group+0x662/0xeb0
[ 1755.976278]  ? __pfx_internal_create_group+0x10/0x10
[ 1755.976291]  ? blk_validate_limits+0xc27/0x15c0
[ 1755.976314]  ? lock_is_held_type+0x9e/0x120
[ 1755.976334]  loop_configure+0xc46/0x15a0
[ 1755.976365]  ? __pfx_loop_configure+0x10/0x10
[ 1755.976391]  ? avc_has_extended_perms+0x107/0xf20
[ 1755.976410]  ? find_held_lock+0x2b/0x80
[ 1755.976422]  ? avc_has_extended_perms+0x23b/0xf20
[ 1755.976439]  ? lock_release+0xc8/0x270
[ 1755.976456]  lo_ioctl+0x66d/0x1ca0
[ 1755.976476]  ? __pfx_lo_ioctl+0x10/0x10
[ 1755.976493]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1755.976514]  ? lock_acquire+0x15e/0x2d0
[ 1755.976528]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1755.976545]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1755.976564]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1755.976580]  ? lock_release+0xc8/0x270
[ 1755.976597]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1755.976632]  ? check_irq_usage+0x210/0xb40
[ 1755.976647]  ? __fget_files+0x34/0x3b0
[ 1755.976664]  ? find_held_lock+0x2b/0x80
[ 1755.976675]  ? __fget_files+0x203/0x3b0
[ 1755.976691]  ? __pfx_lo_ioctl+0x10/0x10
[ 1755.976708]  blkdev_ioctl+0x365/0x6d0
[ 1755.976730]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1755.976748]  ? selinux_file_ioctl+0xb9/0x280
[ 1755.976764]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1755.976783]  __x64_sys_ioctl+0x18f/0x210
[ 1755.976798]  do_syscall_64+0xbf/0x420
[ 1755.976811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1755.976825] RIP: 0033:0x7fedf48498d7
[ 1755.976835] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1755.976847] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1755.976859] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf48498d7
[ 1755.976868] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1755.976876] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1755.976884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1755.976891] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1755.976906]  </TASK>
21:00:40 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b48, &(0x7f0000000140))

21:00:40 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x12080000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:40 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x200000000000000}], 0x2, 0x600, 0x0)

21:00:40 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1756.035354] set_capacity_and_notify: 9 callbacks suppressed
[ 1756.035366] loop1: detected capacity change from 0 to 264192
[ 1756.039648] loop5: detected capacity change from 0 to 512
[ 1756.041858] loop4: detected capacity change from 0 to 4132
[ 1756.046479] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1756.047358] EXT4-fs (loop4): group descriptors corrupted!
[ 1756.051424] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1756.052244] EXT4-fs (loop1): group descriptors corrupted!
[ 1756.060616] loop1: detected capacity change from 0 to 264192
[ 1756.062014] loop2: detected capacity change from 0 to 4132
[ 1756.062431] loop4: detected capacity change from 0 to 4132
[ 1756.070924] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1756.071700] EXT4-fs (loop4): group descriptors corrupted!
[ 1756.072328] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1756.073355] EXT4-fs (loop1): group descriptors corrupted!
[ 1756.077643] loop3: detected capacity change from 0 to 512
21:00:40 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x300000000000000}], 0x2, 0x600, 0x0)

[ 1756.084327] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1756.086434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1756.101896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:00:40 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:40 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200001004002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:40 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b49, &(0x7f0000000140))

21:00:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 40)

21:00:40 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1756.194060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1756.234526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1756.235517] loop2: detected capacity change from 0 to 4132
[ 1756.241181] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1756.250837] loop1: detected capacity change from 0 to 264192
[ 1756.264154] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1756.264994] EXT4-fs (loop1): group descriptors corrupted!
[ 1756.275172] loop4: detected capacity change from 0 to 4132
[ 1756.300851] EXT4-fs (loop4): inodes count not valid: 65568 vs 32
[ 1756.316113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1756.329330] EXT4-fs (loop4): inodes count not valid: 65568 vs 32
[ 1756.373724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:00:49 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 41)

21:00:49 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x400000000000000}], 0x2, 0x600, 0x0)

21:00:49 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:49 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:00:49 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b4a, &(0x7f0000000140))

21:00:49 executing program 7:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = dup2(r0, r1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004855}, 0x8080)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

21:00:49 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:49 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000006402000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1765.253568] set_capacity_and_notify: 2 callbacks suppressed
[ 1765.253585] loop2: detected capacity change from 0 to 4132
[ 1765.254906] loop1: detected capacity change from 0 to 264192
[ 1765.261893] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1765.264086] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1765.264871] EXT4-fs (loop1): group descriptors corrupted!
[ 1765.272439] loop1: detected capacity change from 0 to 264192
[ 1765.280117] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1765.280921] EXT4-fs (loop1): group descriptors corrupted!
21:00:49 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x500000000000000}], 0x2, 0x600, 0x0)

[ 1765.298468] FAULT_INJECTION: forcing a failure.
[ 1765.298468] name failslab, interval 1, probability 0, space 0, times 0
[ 1765.299504] CPU: 1 UID: 0 PID: 12528 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1765.299521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1765.299528] Call Trace:
[ 1765.299532]  <TASK>
[ 1765.299537]  dump_stack_lvl+0xfa/0x120
[ 1765.299563]  should_fail_ex+0x4d7/0x5e0
[ 1765.299579]  ? __kernfs_new_node+0xd3/0x930
[ 1765.299592]  should_failslab+0xc2/0x120
[ 1765.299610]  kmem_cache_alloc_noprof+0x80/0x710
[ 1765.299628]  ? __kernfs_new_node+0xd3/0x930
[ 1765.299639]  __kernfs_new_node+0xd3/0x930
[ 1765.299653]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1765.299668]  ? lock_acquire+0x15e/0x2d0
[ 1765.299684]  ? kernfs_root+0x23/0x2a0
[ 1765.299696]  ? find_held_lock+0x2b/0x80
[ 1765.299708]  ? kernfs_root+0xee/0x2a0
[ 1765.299719]  ? lock_release+0xc8/0x270
[ 1765.299733]  ? lock_is_held_type+0x9e/0x120
[ 1765.299754]  kernfs_new_node+0x13c/0x1e0
[ 1765.299773]  __kernfs_create_file+0x55/0x360
[ 1765.299794]  sysfs_add_file_mode_ns+0x21c/0x430
[ 1765.299809]  ? __pfx_dev_attr_store+0x10/0x10
[ 1765.299830]  internal_create_group+0x662/0xeb0
[ 1765.299848]  ? __pfx_internal_create_group+0x10/0x10
[ 1765.299864]  ? lock_is_held_type+0x9e/0x120
[ 1765.299883]  loop_configure+0xc46/0x15a0
21:00:49 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1765.299914]  ? __pfx_loop_configure+0x10/0x10
[ 1765.299940]  ? avc_has_extended_perms+0x107/0xf20
[ 1765.299963]  ? find_held_lock+0x2b/0x80
[ 1765.299974]  ? avc_has_extended_perms+0x23b/0xf20
[ 1765.299991]  ? lock_release+0xc8/0x270
[ 1765.300008]  lo_ioctl+0x66d/0x1ca0
[ 1765.300028]  ? __pfx_lo_ioctl+0x10/0x10
[ 1765.300045]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1765.300065]  ? lock_acquire+0x15e/0x2d0
[ 1765.300080]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1765.300094]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1765.300113]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1765.300129]  ? lock_release+0xc8/0x270
[ 1765.300145]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1765.300179]  ? check_irq_usage+0x210/0xb40
[ 1765.300193]  ? __fget_files+0x34/0x3b0
[ 1765.300209]  ? find_held_lock+0x2b/0x80
[ 1765.300220]  ? __fget_files+0x203/0x3b0
[ 1765.300236]  ? __pfx_lo_ioctl+0x10/0x10
[ 1765.300253]  blkdev_ioctl+0x365/0x6d0
[ 1765.300272]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1765.300290]  ? selinux_file_ioctl+0xb9/0x280
[ 1765.300305]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1765.300324]  __x64_sys_ioctl+0x18f/0x210
[ 1765.300339]  do_syscall_64+0xbf/0x420
[ 1765.300352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1765.300365] RIP: 0033:0x7fedf48498d7
[ 1765.300375] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1765.300386] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1765.300398] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf48498d7
[ 1765.300406] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1765.300413] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1765.300420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1765.300427] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1765.300442]  </TASK>
[ 1765.301058] loop4: detected capacity change from 0 to 4132
[ 1765.326512] loop3: detected capacity change from 0 to 512
[ 1765.328426] loop5: detected capacity change from 0 to 512
[ 1765.349826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:00:49 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1765.367274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1765.375653] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1765.376490] EXT4-fs (loop4): group descriptors corrupted!
21:00:49 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40005, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1765.387365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1765.388945] loop2: detected capacity change from 0 to 4132
[ 1765.395373] loop4: detected capacity change from 0 to 4132
[ 1765.405359] loop1: detected capacity change from 0 to 264192
[ 1765.406750] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1765.410655] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1765.411489] EXT4-fs (loop4): group descriptors corrupted!
21:00:49 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 42)

[ 1765.412614] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
21:00:49 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b4b, &(0x7f0000000140))

[ 1765.434044] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1765.434861] EXT4-fs (loop1): group descriptors corrupted!
21:00:49 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x600000000000000}], 0x2, 0x600, 0x0)

21:00:49 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000048002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1765.462621] loop5: detected capacity change from 0 to 512
21:00:49 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f465", 0x33, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:49 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3e, 0x80, 0x1, 0x9, 0x0, 0x100000000040001f, 0x80, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x4, @perf_bp={&(0x7f0000000100), 0x5}, 0xc040, 0x102, 0x80, 0x5, 0x80000000, 0x1, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0x800000000000000f, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0xfffffffffffffcb3, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

[ 1765.489180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1765.511904] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1765.522162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1765.533156] EXT4-fs (loop4): inodes count not valid: 67108896 vs 32
[ 1765.539902] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1765.553163] EXT4-fs (loop4): inodes count not valid: 67108896 vs 32
[ 1765.562043] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:00:57 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40006, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:00:57 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b4c, &(0x7f0000000140))

21:00:57 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 43)

21:00:57 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:57 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x700000000000000}], 0x2, 0x600, 0x0)

21:00:57 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f465", 0x33, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:57 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000003e802000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:57 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3e, 0x80, 0x1, 0x9, 0x0, 0x100000000040001f, 0x80, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x4, @perf_bp={&(0x7f0000000100), 0x5}, 0xc040, 0x102, 0x80, 0x5, 0x80000000, 0x1, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0x800000000000000f, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0xfffffffffffffcb3, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

[ 1773.795235] set_capacity_and_notify: 4 callbacks suppressed
[ 1773.795251] loop2: detected capacity change from 0 to 4132
[ 1773.798303] loop3: detected capacity change from 0 to 512
[ 1773.799506] FAULT_INJECTION: forcing a failure.
[ 1773.799506] name failslab, interval 1, probability 0, space 0, times 0
[ 1773.800426] CPU: 1 UID: 0 PID: 12579 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1773.800442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1773.800450] Call Trace:
[ 1773.800454]  <TASK>
[ 1773.800459]  dump_stack_lvl+0xfa/0x120
[ 1773.800485]  should_fail_ex+0x4d7/0x5e0
[ 1773.800502]  ? kobject_uevent_env+0x22e/0xf90
[ 1773.800518]  should_failslab+0xc2/0x120
[ 1773.800540]  __kmalloc_cache_noprof+0x80/0x730
[ 1773.800560]  ? ___ratelimit+0x3c0/0x910
[ 1773.800582]  ? kobject_uevent_env+0x22e/0xf90
[ 1773.800597]  kobject_uevent_env+0x22e/0xf90
[ 1773.800615]  ? lock_is_held_type+0x9e/0x120
[ 1773.800635]  loop_configure+0xe31/0x15a0
[ 1773.800665]  ? __pfx_loop_configure+0x10/0x10
[ 1773.800691]  ? avc_has_extended_perms+0x107/0xf20
[ 1773.800709]  ? find_held_lock+0x2b/0x80
[ 1773.800722]  ? avc_has_extended_perms+0x23b/0xf20
[ 1773.800739]  ? lock_release+0xc8/0x270
[ 1773.800756]  lo_ioctl+0x66d/0x1ca0
[ 1773.800777]  ? __pfx_lo_ioctl+0x10/0x10
[ 1773.800793]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1773.800814]  ? lock_acquire+0x15e/0x2d0
[ 1773.800829]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1773.800843]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1773.800862]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1773.800878]  ? lock_release+0xc8/0x270
[ 1773.800895]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1773.800930]  ? check_irq_usage+0x210/0xb40
[ 1773.800943]  ? __fget_files+0x34/0x3b0
[ 1773.800960]  ? find_held_lock+0x2b/0x80
[ 1773.800971]  ? __fget_files+0x203/0x3b0
[ 1773.800987]  ? __pfx_lo_ioctl+0x10/0x10
[ 1773.801004]  blkdev_ioctl+0x365/0x6d0
[ 1773.801024]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1773.801041]  ? selinux_file_ioctl+0xb9/0x280
[ 1773.801057]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1773.801075]  __x64_sys_ioctl+0x18f/0x210
[ 1773.801091]  do_syscall_64+0xbf/0x420
[ 1773.801103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1773.801116] RIP: 0033:0x7fedf48498d7
[ 1773.801127] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1773.801139] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1773.801151] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf48498d7
[ 1773.801159] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1773.801166] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1773.801174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1773.801181] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1773.801196]  </TASK>
[ 1773.823906] loop1: detected capacity change from 0 to 264192
[ 1773.831677] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1773.832661] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1773.833463] EXT4-fs (loop1): group descriptors corrupted!
[ 1773.842619] loop5: detected capacity change from 0 to 512
[ 1773.848373] loop1: detected capacity change from 0 to 264192
[ 1773.857835] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1773.858935] EXT4-fs (loop1): group descriptors corrupted!
[ 1773.868131] loop4: detected capacity change from 0 to 4132
[ 1773.872734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1773.890300] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32
21:00:58 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f465", 0x33, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:00:58 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x27000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1773.926504] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1773.933154] loop4: detected capacity change from 0 to 4132
21:00:58 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b4d, &(0x7f0000000140))

[ 1773.940460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1773.944757] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32
21:00:58 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0xa00000000000000}], 0x2, 0x600, 0x0)

[ 1773.952909] loop2: detected capacity change from 0 to 4132
21:00:58 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40007, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1773.974262] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
21:00:58 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 44)

21:00:58 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffdef02000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1774.009383] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1774.017757] loop1: detected capacity change from 0 to 264192
[ 1774.049670] loop5: detected capacity change from 0 to 512
[ 1774.051608] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1774.052415] EXT4-fs (loop1): group descriptors corrupted!
[ 1774.067841] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1774.068670] EXT4-fs (loop1): group descriptors corrupted!
[ 1774.090327] EXT4-fs (loop4): inodes count not valid: 4261412640 vs 32
[ 1774.101929] EXT4-fs (loop4): inodes count not valid: 4261412640 vs 32
[ 1774.123503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1774.138678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1774.161249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1774.178421] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:01:07 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 45)

21:01:07 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40008, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:01:07 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:07 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
pread64(r0, &(0x7f0000000300)=""/176, 0xb0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x1)
fcntl$dupfd(r0, 0x0, r1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x8, 0x40, 0x4, 0x20, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x2, @perf_config_ext={0x3ff, 0x400}, 0x1018, 0x1, 0x80f, 0x1, 0xe1, 0x9, 0x3ff, 0x0, 0xffffffff, 0x0, 0x1}, 0xffffffffffffffff, 0x6, r2, 0x4)

21:01:07 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0x24efff7f00000000}], 0x2, 0x600, 0x0)

21:01:07 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b4e, &(0x7f0000000140))

21:01:07 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x351d0000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:07 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000f502000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1783.459644] set_capacity_and_notify: 4 callbacks suppressed
[ 1783.459671] loop3: detected capacity change from 0 to 512
[ 1783.469665] loop2: detected capacity change from 0 to 4132
[ 1783.470576] FAULT_INJECTION: forcing a failure.
[ 1783.470576] name failslab, interval 1, probability 0, space 0, times 0
[ 1783.472569] CPU: 0 UID: 0 PID: 12624 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1783.472603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1783.472619] Call Trace:
[ 1783.472629]  <TASK>
[ 1783.472639]  dump_stack_lvl+0xfa/0x120
[ 1783.472690]  should_fail_ex+0x4d7/0x5e0
[ 1783.472724]  ? kobject_uevent_env+0x22e/0xf90
[ 1783.472759]  should_failslab+0xc2/0x120
[ 1783.472796]  __kmalloc_cache_noprof+0x80/0x730
[ 1783.472838]  ? ___ratelimit+0x3c0/0x910
[ 1783.472886]  ? kobject_uevent_env+0x22e/0xf90
[ 1783.472921]  kobject_uevent_env+0x22e/0xf90
[ 1783.472968]  ? lock_is_held_type+0x9e/0x120
[ 1783.473012]  loop_configure+0xe31/0x15a0
[ 1783.473079]  ? __pfx_loop_configure+0x10/0x10
[ 1783.473136]  ? avc_has_extended_perms+0x107/0xf20
[ 1783.473176]  ? find_held_lock+0x2b/0x80
[ 1783.473203]  ? avc_has_extended_perms+0x23b/0xf20
[ 1783.473241]  ? lock_release+0xc8/0x270
[ 1783.473278]  lo_ioctl+0x66d/0x1ca0
[ 1783.473324]  ? __pfx_lo_ioctl+0x10/0x10
[ 1783.473361]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1783.473408]  ? lock_acquire+0x15e/0x2d0
[ 1783.473440]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1783.473471]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1783.473511]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1783.473547]  ? lock_release+0xc8/0x270
[ 1783.473585]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1783.473659]  ? check_irq_usage+0x210/0xb40
[ 1783.473691]  ? __fget_files+0x34/0x3b0
[ 1783.473725]  ? find_held_lock+0x2b/0x80
[ 1783.473750]  ? __fget_files+0x203/0x3b0
[ 1783.473785]  ? __pfx_lo_ioctl+0x10/0x10
[ 1783.473824]  blkdev_ioctl+0x365/0x6d0
[ 1783.473865]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1783.473905]  ? selinux_file_ioctl+0xb9/0x280
[ 1783.473938]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1783.473980]  __x64_sys_ioctl+0x18f/0x210
[ 1783.474012]  do_syscall_64+0xbf/0x420
[ 1783.474040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1783.474068] RIP: 0033:0x7fedf48498d7
[ 1783.474089] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1783.474114] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1783.474140] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf48498d7
[ 1783.474158] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1783.474174] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1783.474190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1783.474206] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1783.474240]  </TASK>
[ 1783.475830] loop1: detected capacity change from 0 to 264192
[ 1783.490814] loop4: detected capacity change from 0 to 4132
[ 1783.497327] loop5: detected capacity change from 0 to 512
[ 1783.503760] EXT4-fs (loop2): invalid first ino: 0
21:01:07 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0, 0xf5ffffff00000000}], 0x2, 0x600, 0x0)

[ 1783.525623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1783.529149] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1783.529890] EXT4-fs (loop4): group descriptors corrupted!
[ 1783.553291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1783.579547] loop4: detected capacity change from 0 to 4132
[ 1783.583128] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1783.584763] EXT4-fs (loop1): group descriptors corrupted!
21:01:07 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
pread64(r0, &(0x7f0000000300)=""/176, 0xb0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x1)
fcntl$dupfd(r0, 0x0, r1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x8, 0x40, 0x4, 0x20, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x2, @perf_config_ext={0x3ff, 0x400}, 0x1018, 0x1, 0x80f, 0x1, 0xe1, 0x9, 0x3ff, 0x0, 0xffffffff, 0x0, 0x1}, 0xffffffffffffffff, 0x6, r2, 0x4)

21:01:07 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:07 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40009, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1783.605525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1783.615908] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1783.617557] EXT4-fs (loop4): group descriptors corrupted!
[ 1783.631918] loop5: detected capacity change from 0 to 512
[ 1783.635745] loop1: detected capacity change from 0 to 264192
[ 1783.638815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:01:07 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b52, &(0x7f0000000140))

[ 1783.672717] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1783.673782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1783.674285] EXT4-fs (loop1): group descriptors corrupted!
21:01:07 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000a, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1783.701748] loop2: detected capacity change from 0 to 4132
[ 1783.705708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1783.723277] EXT4-fs (loop2): invalid first ino: 0
[ 1783.758939] loop5: detected capacity change from 0 to 512
[ 1783.771501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1783.795222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:01:15 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x3, 0x600, 0x0)

21:01:15 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
pread64(r0, &(0x7f0000000300)=""/176, 0xb0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x1)
fcntl$dupfd(r0, 0x0, r1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x8, 0x40, 0x4, 0x20, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x2, @perf_config_ext={0x3ff, 0x400}, 0x1018, 0x1, 0x80f, 0x1, 0xe1, 0x9, 0x3ff, 0x0, 0xffffffff, 0x0, 0x1}, 0xffffffffffffffff, 0x6, r2, 0x4)

21:01:15 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b62, &(0x7f0000000140))

21:01:15 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000b, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:01:15 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffdfc02000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:15 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x361d0000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:15 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:15 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 46)

[ 1791.703365] loop5: detected capacity change from 0 to 512
[ 1791.726564] loop2: detected capacity change from 0 to 4132
[ 1791.727636] loop4: detected capacity change from 0 to 4132
[ 1791.737428] EXT4-fs (loop4): inodes count not valid: 4261412640 vs 32
[ 1791.742374] EXT4-fs (loop2): invalid first ino: 0
[ 1791.752247] loop4: detected capacity change from 0 to 4132
[ 1791.752592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1791.758456] loop1: detected capacity change from 0 to 264192
[ 1791.761052] EXT4-fs (loop4): inodes count not valid: 4261412640 vs 32
[ 1791.762566] loop3: detected capacity change from 0 to 512
[ 1791.781795] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1791.782569] EXT4-fs (loop1): group descriptors corrupted!
21:01:15 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1791.794410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:01:15 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b63, &(0x7f0000000140))

[ 1791.818498] loop1: detected capacity change from 0 to 264192
[ 1791.822539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1791.824691] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1791.825568] EXT4-fs (loop1): group descriptors corrupted!
21:01:15 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x8, 0x600, 0x0)

21:01:15 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1791.853412] loop2: detected capacity change from 0 to 4132
[ 1791.856443] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048)
[ 1791.909899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1791.931044] loop5: detected capacity change from 0 to 512
[ 1791.938034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1791.967451] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:01:24 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:24 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x9, 0x600, 0x0)

21:01:24 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000d, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:01:24 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffdfd02000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:24 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 47)

21:01:24 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b64, &(0x7f0000000140))

21:01:24 executing program 7:
sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@llc={0x1a, 0xfdf3, 0x8, 0x64, 0x3, 0x20, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="20445a525d5ea02c8da2c2c4b4cf64dcada4338fc150dbbae070f1cac6901f92897858b5409483a612dffdecd8aab7f619eaac67d3123ff04e813d2154b5dd66d90a2139e00ffb59c47784f9700fbdba30690c224e4abb3aa7ec7802d7b74a38af8f0b9e9a24aaf727f582f0aaa29d6130d9648b142e65cfb97f43dae43772b1c48613239839a2bed699af300218595b1b4e0befef16d12e63dffa7703acde5b90340ae9f4daf065e55e94bfb281db", 0xaf}, {&(0x7f00000001c0)="85de0cf77c1f90d2ae9a3515c9c59bf505497324e31cc734123298272eb3e266cbebf9cceba344bf81794a18b24f6fa5827e3f865a8071d31b8b602acde4312c4a3d3cba0361c19e287e343a39b58c2e2624b7887dbb58c238fa0cefaeb060cce3b0e3937883ef339936cb24a3ce4bd2ce16a12bf056fff6d3f5b0f49c4b6dc9bee31960ee89eaa5da46535821fa60", 0x8f}], 0x2, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6d}}], 0x30}, 0x8000)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={0x0, 0xf}, 0x2430, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0)
r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f0000000480)={[{@huge_always}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{#'}}]})
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2})
stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$P9_RSTATu(r3, &(0x7f00000008c0)={0x61, 0x7d, 0x1, {{0x0, 0x42, 0x92bf, 0x8, {0x8, 0x0, 0x5}, 0x41110000, 0x2, 0x2, 0x6, 0xf, '/dev/snd/timer\x00'}, 0xa, 'map_files\x00', r4, 0x0, 0xee01}}, 0x61)
r5 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x1f, 0x5, 0x4, 0x0, 0x5, 0x94ec, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x4e8, 0x4, 0x1, 0x20452d21, 0x4, 0x2985, 0x0, 0x7, 0x0, 0x80}, 0xffffffffffffffff, 0x2, r0, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0)
copy_file_range(r1, &(0x7f00000000c0)=0x2703, r2, &(0x7f0000000100), 0x80000000, 0x0)
setuid(0xee01)
syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')

[ 1800.879369] loop3: detected capacity change from 0 to 512
[ 1800.881563] FAULT_INJECTION: forcing a failure.
[ 1800.881563] name failslab, interval 1, probability 0, space 0, times 0
[ 1800.882637] CPU: 1 UID: 0 PID: 12717 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1800.882654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1800.882662] Call Trace:
[ 1800.882667]  <TASK>
[ 1800.882672]  dump_stack_lvl+0xfa/0x120
[ 1800.882700]  should_fail_ex+0x4d7/0x5e0
[ 1800.882719]  should_failslab+0xc2/0x120
[ 1800.882737]  __kmalloc_noprof+0xd6/0x830
[ 1800.882758]  ? __create_object+0x59/0x80
[ 1800.882771]  ? kobject_get_path+0xc9/0x200
[ 1800.882788]  ? kobject_get_path+0xc9/0x200
[ 1800.882801]  kobject_get_path+0xc9/0x200
[ 1800.882815]  ? kasan_save_track+0x14/0x30
[ 1800.882837]  kobject_uevent_env+0x252/0xf90
[ 1800.882858]  ? lock_is_held_type+0x9e/0x120
[ 1800.882879]  loop_configure+0xe31/0x15a0
[ 1800.882911]  ? __pfx_loop_configure+0x10/0x10
[ 1800.882937]  ? avc_has_extended_perms+0x107/0xf20
[ 1800.882960]  ? find_held_lock+0x2b/0x80
[ 1800.882973]  ? avc_has_extended_perms+0x23b/0xf20
[ 1800.882991]  ? lock_release+0xc8/0x270
[ 1800.883009]  lo_ioctl+0x66d/0x1ca0
[ 1800.883040]  ? __pfx_lo_ioctl+0x10/0x10
[ 1800.883057]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1800.883078]  ? lock_acquire+0x15e/0x2d0
[ 1800.883092]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1800.883109]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1800.883129]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1800.883146]  ? lock_release+0xc8/0x270
[ 1800.883163]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1800.883199]  ? check_irq_usage+0x210/0xb40
[ 1800.883213]  ? __fget_files+0x34/0x3b0
[ 1800.883232]  ? find_held_lock+0x2b/0x80
[ 1800.883243]  ? __fget_files+0x203/0x3b0
[ 1800.883259]  ? __pfx_lo_ioctl+0x10/0x10
[ 1800.883277]  blkdev_ioctl+0x365/0x6d0
[ 1800.883298]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1800.883316]  ? selinux_file_ioctl+0xb9/0x280
[ 1800.883332]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1800.883352]  __x64_sys_ioctl+0x18f/0x210
[ 1800.883367]  do_syscall_64+0xbf/0x420
[ 1800.883380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1800.883393] RIP: 0033:0x7fedf48498d7
[ 1800.883404] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1800.883417] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1800.883429] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf48498d7
[ 1800.883437] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1800.883445] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1800.883453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1800.883461] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1800.883476]  </TASK>
[ 1800.904183] loop1: detected capacity change from 0 to 264192
[ 1800.910558] loop5: detected capacity change from 0 to 512
[ 1800.922621] loop4: detected capacity change from 0 to 4132
21:01:24 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1800.931332] EXT4-fs (loop4): inodes count not valid: 4261412640 vs 32
[ 1800.933724] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1800.934571] EXT4-fs (loop1): group descriptors corrupted!
[ 1800.940455] loop4: detected capacity change from 0 to 4132
21:01:25 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0xa, 0x600, 0x0)

[ 1800.947313] EXT4-fs (loop4): inodes count not valid: 4261412640 vs 32
21:01:25 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b65, &(0x7f0000000140))

[ 1800.960108] loop1: detected capacity change from 0 to 264192
[ 1800.964314] loop2: detected capacity change from 0 to 4132
[ 1800.969165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1800.975934] tmpfs: Unsupported parameter 'huge'
[ 1800.978249] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1800.979818] EXT4-fs (loop1): group descriptors corrupted!
[ 1800.982872] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048)
[ 1801.036920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:01:25 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffffe02000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1801.051034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:01:25 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:25 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1801.090432] tmpfs: Unsupported parameter 'huge'
21:01:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 48)

21:01:25 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:25 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x63, 0x600, 0x0)

[ 1801.135823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1801.137560] loop2: detected capacity change from 0 to 4132
[ 1801.148893] loop1: detected capacity change from 0 to 264192
[ 1801.150525] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048)
[ 1801.160164] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1801.162188] EXT4-fs (loop1): group descriptors corrupted!
21:01:25 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b66, &(0x7f0000000140))

[ 1801.202545] loop4: detected capacity change from 0 to 4132
[ 1801.234903] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32
21:01:25 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000", 0x60, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1801.261279] EXT4-fs (loop4): inodes count not valid: 4294967072 vs 32
[ 1801.287540] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048)
[ 1801.302507] FAULT_INJECTION: forcing a failure.
[ 1801.302507] name failslab, interval 1, probability 0, space 0, times 0
[ 1801.304423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1801.306150] CPU: 1 UID: 0 PID: 12759 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1801.306168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1801.306176] Call Trace:
[ 1801.306182]  <TASK>
[ 1801.306187]  dump_stack_lvl+0xfa/0x120
[ 1801.306218]  should_fail_ex+0x4d7/0x5e0
[ 1801.306238]  should_failslab+0xc2/0x120
[ 1801.306257]  kmem_cache_alloc_node_noprof+0x87/0x730
[ 1801.306272]  ? mark_held_locks+0x49/0x80
[ 1801.306289]  ? __alloc_skb+0x159/0x430
[ 1801.306308]  ? __alloc_skb+0x159/0x430
[ 1801.306320]  __alloc_skb+0x159/0x430
[ 1801.306331]  ? __alloc_skb+0x369/0x430
[ 1801.306344]  ? __pfx___alloc_skb+0x10/0x10
[ 1801.306356]  ? lock_acquire+0x15e/0x2d0
[ 1801.306372]  ? netlink_has_listeners+0x7f/0x430
[ 1801.306390]  ? netlink_has_listeners+0x20d/0x430
[ 1801.306404]  ? lock_release+0xc8/0x270
[ 1801.306421]  alloc_uevent_skb+0x7b/0x210
[ 1801.306441]  kobject_uevent_env+0xa8c/0xf90
[ 1801.306460]  ? lock_is_held_type+0x9e/0x120
[ 1801.306482]  loop_configure+0xe31/0x15a0
[ 1801.306515]  ? __pfx_loop_configure+0x10/0x10
[ 1801.306541]  ? avc_has_extended_perms+0x107/0xf20
[ 1801.306561]  ? find_held_lock+0x2b/0x80
[ 1801.306574]  ? avc_has_extended_perms+0x23b/0xf20
[ 1801.306592]  ? lock_release+0xc8/0x270
[ 1801.306610]  lo_ioctl+0x66d/0x1ca0
[ 1801.306632]  ? __pfx_lo_ioctl+0x10/0x10
[ 1801.306650]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1801.306672]  ? lock_acquire+0x15e/0x2d0
[ 1801.306688]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1801.306704]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1801.306725]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1801.306742]  ? lock_release+0xc8/0x270
[ 1801.306760]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1801.306797]  ? check_irq_usage+0x210/0xb40
[ 1801.306812]  ? __fget_files+0x34/0x3b0
[ 1801.306832]  ? find_held_lock+0x2b/0x80
[ 1801.306844]  ? __fget_files+0x203/0x3b0
[ 1801.306860]  ? __pfx_lo_ioctl+0x10/0x10
[ 1801.306879]  blkdev_ioctl+0x365/0x6d0
[ 1801.306901]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1801.306921]  ? selinux_file_ioctl+0xb9/0x280
[ 1801.306937]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1801.306962]  __x64_sys_ioctl+0x18f/0x210
[ 1801.306978]  do_syscall_64+0xbf/0x420
[ 1801.306992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1801.307006] RIP: 0033:0x7fedf48498d7
[ 1801.307026] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1801.307039] RSP: 002b:00007fedf1dbef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1801.307052] RAX: ffffffffffffffda RBX: 00007fedf4893970 RCX: 00007fedf48498d7
[ 1801.307061] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1801.307069] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1801.307077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1801.307085] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1801.307101]  </TASK>
[ 1801.336999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1801.371530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1801.383212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:01:34 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40018, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:01:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b67, &(0x7f0000000140))

21:01:34 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 49)

21:01:34 executing program 7:
sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@llc={0x1a, 0xfdf3, 0x8, 0x64, 0x3, 0x20, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="20445a525d5ea02c8da2c2c4b4cf64dcada4338fc150dbbae070f1cac6901f92897858b5409483a612dffdecd8aab7f619eaac67d3123ff04e813d2154b5dd66d90a2139e00ffb59c47784f9700fbdba30690c224e4abb3aa7ec7802d7b74a38af8f0b9e9a24aaf727f582f0aaa29d6130d9648b142e65cfb97f43dae43772b1c48613239839a2bed699af300218595b1b4e0befef16d12e63dffa7703acde5b90340ae9f4daf065e55e94bfb281db", 0xaf}, {&(0x7f00000001c0)="85de0cf77c1f90d2ae9a3515c9c59bf505497324e31cc734123298272eb3e266cbebf9cceba344bf81794a18b24f6fa5827e3f865a8071d31b8b602acde4312c4a3d3cba0361c19e287e343a39b58c2e2624b7887dbb58c238fa0cefaeb060cce3b0e3937883ef339936cb24a3ce4bd2ce16a12bf056fff6d3f5b0f49c4b6dc9bee31960ee89eaa5da46535821fa60", 0x8f}], 0x2, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6d}}], 0x30}, 0x8000)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={0x0, 0xf}, 0x2430, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0)
r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f0000000480)={[{@huge_always}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{#'}}]})
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2})
stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$P9_RSTATu(r3, &(0x7f00000008c0)={0x61, 0x7d, 0x1, {{0x0, 0x42, 0x92bf, 0x8, {0x8, 0x0, 0x5}, 0x41110000, 0x2, 0x2, 0x6, 0xf, '/dev/snd/timer\x00'}, 0xa, 'map_files\x00', r4, 0x0, 0xee01}}, 0x61)
r5 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x1f, 0x5, 0x4, 0x0, 0x5, 0x94ec, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x4e8, 0x4, 0x1, 0x20452d21, 0x4, 0x2985, 0x0, 0x7, 0x0, 0x80}, 0xffffffffffffffff, 0x2, r0, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0)
copy_file_range(r1, &(0x7f00000000c0)=0x2703, r2, &(0x7f0000000100), 0x80000000, 0x0)
setuid(0xee01)
syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')

21:01:34 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:34 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0xa, 0x0)

21:01:34 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000", 0x60, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:34 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000001ff02000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1810.104321] set_capacity_and_notify: 4 callbacks suppressed
[ 1810.104335] loop2: detected capacity change from 0 to 4132
[ 1810.110757] tmpfs: Unsupported parameter 'huge'
[ 1810.115463] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048)
21:01:34 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000", 0x60, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b68, &(0x7f0000000140))

[ 1810.167918] loop2: detected capacity change from 0 to 4132
[ 1810.170992] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048)
[ 1810.192866] loop1: detected capacity change from 0 to 264192
[ 1810.193930] loop5: detected capacity change from 0 to 512
[ 1810.199139] loop4: detected capacity change from 0 to 4132
[ 1810.216749] loop3: detected capacity change from 0 to 512
[ 1810.219252] EXT4-fs (loop4): inodes count not valid: 16777248 vs 32
21:01:34 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x63, 0x0)

21:01:34 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201", 0x63, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1810.220904] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1810.222873] EXT4-fs (loop1): group descriptors corrupted!
[ 1810.237066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1810.243585] loop4: detected capacity change from 0 to 4132
21:01:34 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0xa)
fchown(r0, 0x0, 0x0)

[ 1810.266856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1810.271462] loop2: detected capacity change from 0 to 4132
21:01:34 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4001b, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1810.281096] EXT4-fs (loop4): inodes count not valid: 16777248 vs 32
[ 1810.282897] loop1: detected capacity change from 0 to 264192
[ 1810.286483] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048)
[ 1810.311655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1810.315310] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1810.317026] EXT4-fs (loop1): group descriptors corrupted!
21:01:34 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 50)

[ 1810.361396] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:01:34 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201", 0x63, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:34 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x137, 0x0)

21:01:34 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x60000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b69, &(0x7f0000000140))

[ 1810.424220] loop5: detected capacity change from 0 to 512
21:01:34 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000f0ffff02000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1810.438125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1810.516586] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048)
[ 1810.612822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1810.625555] EXT4-fs (loop4): inodes count not valid: 4293918752 vs 32
[ 1810.644314] EXT4-fs (loop4): inodes count not valid: 4293918752 vs 32
[ 1810.644359] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1810.646915] EXT4-fs (loop1): group descriptors corrupted!
[ 1810.671362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1810.712633] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1810.714384] EXT4-fs (loop1): group descriptors corrupted!
[ 1810.775620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:01:44 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201", 0x63, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:44 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x63050000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 51)

21:01:44 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x1a2, 0x0)

21:01:44 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20effdffff02000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:44 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b6a, &(0x7f0000000140))

21:01:44 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x12030, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0)

21:01:44 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40023, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1820.621976] set_capacity_and_notify: 6 callbacks suppressed
[ 1820.621992] loop2: detected capacity change from 0 to 4132
[ 1820.625080] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048)
21:01:44 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c2010012", 0x65, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1820.658465] loop4: detected capacity change from 0 to 4132
[ 1820.672342] EXT4-fs (loop4): inodes count not valid: 4294831904 vs 32
[ 1820.679714] loop4: detected capacity change from 0 to 4132
[ 1820.689232] EXT4-fs (loop4): inodes count not valid: 4294831904 vs 32
[ 1820.695168] loop2: detected capacity change from 0 to 4132
[ 1820.703431] loop5: detected capacity change from 0 to 512
[ 1820.705467] loop1: detected capacity change from 0 to 264192
[ 1820.706303] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048)
[ 1820.708343] loop3: detected capacity change from 0 to 512
[ 1820.715322] FAULT_INJECTION: forcing a failure.
[ 1820.715322] name failslab, interval 1, probability 0, space 0, times 0
[ 1820.717225] CPU: 0 UID: 0 PID: 12846 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1820.717257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1820.717271] Call Trace:
[ 1820.717279]  <TASK>
[ 1820.717288]  dump_stack_lvl+0xfa/0x120
[ 1820.717333]  should_fail_ex+0x4d7/0x5e0
[ 1820.717366]  ? getname_flags.part.0+0x48/0x540
[ 1820.717388]  should_failslab+0xc2/0x120
[ 1820.717422]  kmem_cache_alloc_noprof+0x80/0x710
[ 1820.717446]  ? blkdev_ioctl+0x188/0x6d0
[ 1820.717483]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1820.717525]  ? getname_flags.part.0+0x48/0x540
[ 1820.717549]  getname_flags.part.0+0x48/0x540
[ 1820.717577]  __x64_sys_mkdir+0xdb/0x140
21:01:44 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b70, &(0x7f0000000140))

[ 1820.717612]  do_syscall_64+0xbf/0x420
[ 1820.717640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1820.717666] RIP: 0033:0x7fedf4848c27
[ 1820.717685] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1820.717709] RSP: 002b:00007fedf1dbefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1820.717733] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4848c27
[ 1820.717751] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1820.717766] RBP: 00007fedf1dbf040 R08: 0000000000000000 R09: ffffffffffffffff
[ 1820.717783] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1820.717798] R13: 0000000020000100 R14: 00007fedf1dbf000 R15: 0000000020013a00
[ 1820.717833]  </TASK>
[ 1820.770758] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1820.772535] EXT4-fs (loop1): group descriptors corrupted!
21:01:44 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20fcfdffff02000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:44 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c2010012", 0x65, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1820.806209] loop1: detected capacity change from 0 to 264192
21:01:44 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x20d, 0x0)

[ 1820.852993] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1820.854840] EXT4-fs (loop1): group descriptors corrupted!
[ 1820.856787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:01:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 52)

[ 1820.905803] loop4: detected capacity change from 0 to 4132
[ 1820.910241] EXT4-fs (loop4): inodes count not valid: 4294835232 vs 32
[ 1820.917918] loop2: detected capacity change from 0 to 4132
[ 1820.928094] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048)
[ 1820.954781] EXT4-fs (loop4): inodes count not valid: 4294835232 vs 32
21:01:45 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c2010012", 0x65, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1820.996314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:01:45 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40024, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1821.003471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1821.080167] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1821.112844] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048)
[ 1821.139577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1821.198594] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1821.263764] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
[ 1821.307117] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
21:01:55 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 53)

21:01:55 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b71, &(0x7f0000000140))

21:01:55 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0x40, 0x5, 0x9, 0x3, 0x1, 0x9})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000100)="f469604cda5322958fe5cc1b1f338399085616e8173eb3749fbe20481d8700f293c657bccd4c67d616eacc7c9652a526a161a757a0ab423c8a633b49d5473aa383cdeaacf9b769a0c204a62845e607ec1e26bdcc996a03c3388b623d39c98da3cbe5187404055cd2aa8f003423e5282aa53ea1de40c450c9e491e4f36de4b70991df875f22f80e309a855c2f045a96f2753170a88a9a27c373fe52cd67743af094d7a9b61d37ed22c3b45eec688b563e6d", 0xb1, 0x4000000, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r5, 0x0, 0xa0103)

21:01:55 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20fdfdffff02000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:55 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x278, 0x0)

21:01:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40027, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:01:55 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80030000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1831.667544] set_capacity_and_notify: 4 callbacks suppressed
[ 1831.667569] loop2: detected capacity change from 0 to 4132
[ 1831.681673] EXT4-fs warning (device sda): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed
[ 1831.689503] loop5: detected capacity change from 0 to 512
[ 1831.693276] loop1: detected capacity change from 0 to 264192
[ 1831.696578] loop4: detected capacity change from 0 to 4132
[ 1831.701667] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1831.706783] loop3: detected capacity change from 0 to 512
[ 1831.722795] EXT4-fs (loop4): inodes count not valid: 4294835488 vs 32
[ 1831.724040] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1831.725765] EXT4-fs (loop1): group descriptors corrupted!
21:01:55 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x2e3, 0x0)

[ 1831.751525] loop4: detected capacity change from 0 to 4132
[ 1831.764002] loop1: detected capacity change from 0 to 264192
[ 1831.764087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1831.770496] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1831.771996] EXT4-fs (loop1): group descriptors corrupted!
[ 1831.787290] EXT4-fs (loop4): inodes count not valid: 4294835488 vs 32
[ 1831.793707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:01:55 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x82bc4cb1, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20feffffff02000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:55 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:55 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4b72, &(0x7f0000000140))

21:01:55 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40043, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:01:55 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 54)

[ 1831.872218] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1831.877353] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:01:56 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x34e, 0x0)

[ 1831.973149] loop4: detected capacity change from 0 to 4132
[ 1831.978580] loop1: detected capacity change from 0 to 264192
[ 1831.996510] loop2: detected capacity change from 0 to 4132
[ 1832.001985] EXT4-fs (loop4): inodes count not valid: 4294966816 vs 32
[ 1832.003461] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1832.005140] EXT4-fs (loop1): group descriptors corrupted!
[ 1832.017501] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1832.039560] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1832.041119] EXT4-fs (loop1): group descriptors corrupted!
[ 1832.048206] EXT4-fs (loop4): inodes count not valid: 4294966816 vs 32
[ 1832.110860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:01:56 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:01:56 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4bfa, &(0x7f0000000140))

[ 1832.177290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1832.214567] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1832.273847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1832.277871] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1832.374081] EXT4-fs warning (device sda): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed
21:02:05 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000001000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:05 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x3b9, 0x0)

21:02:05 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:05 executing program 7:
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab1ffff7a9636645f0ae3094e59e50bfee32de576970308a41f0dd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x52)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
r1 = dup(r0)
ioctl$TUNSETOWNER(r1, 0x400454cc, 0xffffffffffffffff)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x5)

21:02:05 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, 0x0)

21:02:05 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 55)

21:02:05 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40046, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:02:05 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x4bfb, &(0x7f0000000140))

[ 1841.842048] set_capacity_and_notify: 5 callbacks suppressed
[ 1841.842063] loop4: detected capacity change from 0 to 4132
[ 1841.845156] loop3: detected capacity change from 0 to 512
[ 1841.851399] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1841.852209] EXT4-fs (loop4): group descriptors corrupted!
[ 1841.863646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1841.864770] loop4: detected capacity change from 0 to 4132
[ 1841.874433] loop1: detected capacity change from 0 to 264192
[ 1841.878109] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1841.878843] EXT4-fs (loop4): group descriptors corrupted!
[ 1841.880858] loop5: detected capacity change from 0 to 512
[ 1841.889744] loop2: detected capacity change from 0 to 4132
[ 1841.893542] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1841.894396] EXT4-fs (loop1): group descriptors corrupted!
[ 1841.924492] loop1: detected capacity change from 0 to 264192
[ 1841.930321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1841.937183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1841.947685] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1841.948576] EXT4-fs (loop1): group descriptors corrupted!
[ 1841.981830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:02:14 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 56)

21:02:14 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40048, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:02:14 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5409, &(0x7f0000000140))

21:02:14 executing program 7:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r0, 0x3, r1, 0x20, 0x80000})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145c02, 0x0)
r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x200000, 0xac)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={<r4=>0x0})
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r5, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000180)={r4, 0x1, r5, 0x9, 0x80000})

21:02:14 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200002000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:14 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x424, 0x0)

21:02:14 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x97ffffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:14 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, 0x0)

[ 1850.703802] loop4: detected capacity change from 0 to 4132
[ 1850.707230] loop2: detected capacity change from 0 to 4132
[ 1850.710255] loop3: detected capacity change from 0 to 512
[ 1850.711711] loop5: detected capacity change from 0 to 512
[ 1850.716491] loop1: detected capacity change from 0 to 264192
[ 1850.717930] FAULT_INJECTION: forcing a failure.
[ 1850.717930] name failslab, interval 1, probability 0, space 0, times 0
[ 1850.719852] CPU: 1 UID: 0 PID: 12973 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1850.719882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1850.719896] Call Trace:
[ 1850.719904]  <TASK>
[ 1850.719913]  dump_stack_lvl+0xfa/0x120
[ 1850.719961]  should_fail_ex+0x4d7/0x5e0
[ 1850.719991]  ? __d_alloc+0x34/0xa10
[ 1850.720021]  should_failslab+0xc2/0x120
[ 1850.720053]  kmem_cache_alloc_lru_noprof+0x84/0x720
[ 1850.720077]  ? __d_lookup+0x255/0x490
[ 1850.720108]  ? __d_alloc+0x34/0xa10
[ 1850.720138]  __d_alloc+0x34/0xa10
[ 1850.720174]  d_alloc+0x4a/0x1e0
[ 1850.720208]  lookup_one_qstr_excl+0x174/0x270
[ 1850.720231]  ? mnt_want_write+0x153/0x420
[ 1850.720257]  filename_create+0x1c1/0x400
[ 1850.720283]  ? __pfx_filename_create+0x10/0x10
[ 1850.720309]  ? __virt_addr_valid+0x2e8/0x5d0
[ 1850.720344]  do_mkdirat+0xa8/0x450
[ 1850.720376]  ? __pfx_do_mkdirat+0x10/0x10
[ 1850.720406]  ? strncpy_from_user+0x21b/0x2f0
[ 1850.720447]  __x64_sys_mkdir+0xf3/0x140
[ 1850.720480]  do_syscall_64+0xbf/0x420
[ 1850.720504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1850.720527] RIP: 0033:0x7fedf4848c27
[ 1850.720545] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1850.720567] RSP: 002b:00007fedf1dbefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1850.720588] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4848c27
[ 1850.720603] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1850.720617] RBP: 00007fedf1dbf040 R08: 0000000000000000 R09: ffffffffffffffff
[ 1850.720630] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1850.720644] R13: 0000000020000100 R14: 00007fedf1dbf000 R15: 0000000020013a00
[ 1850.720673]  </TASK>
[ 1850.774833] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1850.776295] EXT4-fs (loop1): group descriptors corrupted!
[ 1850.792645] loop1: detected capacity change from 0 to 264192
[ 1850.805151] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1850.806571] EXT4-fs (loop1): group descriptors corrupted!
21:02:14 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x48f, 0x0)

21:02:14 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x540b, &(0x7f0000000140))

[ 1850.816314] EXT4-fs (loop4): inodes count not valid: 131104 vs 32
[ 1850.850185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1850.870527] loop4: detected capacity change from 0 to 4132
21:02:14 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, 0x0)

[ 1850.891179] EXT4-fs (loop4): inodes count not valid: 131104 vs 32
21:02:15 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 57)

21:02:15 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb14cbc82, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1850.989036] loop3: detected capacity change from 0 to 512
21:02:15 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4004e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:02:15 executing program 7:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r2, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000005c0)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0)
sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4404330}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x499, 0x74}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7d}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6a}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r5, 0x4b40, &(0x7f0000001440)={0x4, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
r6 = syz_io_uring_complete(0x0)
ioctl$TCSETA(r6, 0x5406, &(0x7f0000000300)={0x7, 0x8, 0xa9d9, 0x9, 0xd, "15a2223e09762fbf"})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000f52e67840000000e21847974700000000000000000000cf7928665a6d89756d555ad9f625d9ff9448c8f9e6f3f58127671327b899061a408872d9b2d20b237a3e1ae38ea8f3a3c6fa5b0912c49460668dc7d43fb931d670bbb1ecce13419a15f042ea30039024af068c73ac23f818f51e596fd00ffb1789422fc04d486595bc0d888de5f135d7e3731b6039a6f66daa7cbbf1f5bc00800e0f05173c3858ab407ca5004a6e4def7a537ef202260955fc9abf0a0eaba650e52ccb617e3f3181d722a2ee7cce2a422040f1ca30041425ab0657fa44112eca74404a4f42873374be6333a0dc6c9e6c0d9f552e9d1aa7ccc60d8a0a47f756ff01709a127ffc74b0089e55b95c4cae7078f5a7a4679e1267b77afffd0dcbd764d88d61d65fdd91714a40665dffb3543fc26b3fc032bb5d8d63a6fc"])
fcntl$dupfd(r5, 0x406, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="483be2cde35c5878cb71f2f3c81a933e44306d788fa7bc3e50fc3f8916195c9ebc60efc10ad650088a7f85ac05ea9d5975bf655f3bda1b587644a00100000000000000c3293b413aecaa5b58f10a10fd4fbbb7", @ANYRES16=r1, @ANYBLOB="00042bbd7000fedbdf250900000008000300", @ANYRES32=r3, @ANYBLOB="0c009900140000004b0000000800090005ac0f00"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4040000)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x200}], 0x0, &(0x7f0000000600)={[{@fat=@dos1xfloppy}]})

[ 1851.015642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:02:15 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x540c, &(0x7f0000000140))

[ 1851.043097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:02:15 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x4fa, 0x0)

21:02:15 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200003000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1851.092694] loop1: detected capacity change from 0 to 264192
[ 1851.109591] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1851.110864] EXT4-fs (loop1): group descriptors corrupted!
[ 1851.131409] loop1: detected capacity change from 0 to 264192
[ 1851.147365] EXT4-fs (loop4): inodes count not valid: 196640 vs 32
[ 1851.149641] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1851.150998] EXT4-fs (loop1): group descriptors corrupted!
[ 1851.157003] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1851.169692] EXT4-fs (loop4): inodes count not valid: 196640 vs 32
21:02:15 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 58)

[ 1851.246937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1851.291215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1851.315524] FAULT_INJECTION: forcing a failure.
[ 1851.315524] name failslab, interval 1, probability 0, space 0, times 0
[ 1851.316842] CPU: 1 UID: 0 PID: 13015 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1851.316864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1851.316873] Call Trace:
[ 1851.316880]  <TASK>
[ 1851.316886]  dump_stack_lvl+0xfa/0x120
[ 1851.316919]  should_fail_ex+0x4d7/0x5e0
[ 1851.316943]  ? __d_alloc+0x34/0xa10
[ 1851.316971]  should_failslab+0xc2/0x120
[ 1851.316995]  kmem_cache_alloc_lru_noprof+0x84/0x720
[ 1851.317013]  ? __d_lookup+0x255/0x490
[ 1851.317037]  ? __d_alloc+0x34/0xa10
[ 1851.317058]  __d_alloc+0x34/0xa10
[ 1851.317084]  d_alloc+0x4a/0x1e0
[ 1851.317108]  lookup_one_qstr_excl+0x174/0x270
[ 1851.317125]  ? mnt_want_write+0x153/0x420
[ 1851.317144]  filename_create+0x1c1/0x400
[ 1851.317164]  ? __pfx_filename_create+0x10/0x10
[ 1851.317183]  ? __virt_addr_valid+0x2e8/0x5d0
[ 1851.317209]  do_mkdirat+0xa8/0x450
[ 1851.317233]  ? __pfx_do_mkdirat+0x10/0x10
[ 1851.317256]  ? strncpy_from_user+0x21b/0x2f0
[ 1851.317287]  __x64_sys_mkdir+0xf3/0x140
[ 1851.317310]  do_syscall_64+0xbf/0x420
[ 1851.317328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1851.317346] RIP: 0033:0x7fedf4848c27
[ 1851.317359] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1851.317375] RSP: 002b:00007fedf1dbefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1851.317392] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4848c27
[ 1851.317403] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1851.317413] RBP: 00007fedf1dbf040 R08: 0000000000000000 R09: ffffffffffffffff
[ 1851.317423] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1851.317433] R13: 0000000020000100 R14: 00007fedf1dbf000 R15: 0000000020013a00
[ 1851.317455]  </TASK>
21:02:24 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 59)

21:02:24 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x565, 0x0)

21:02:24 executing program 7:
r0 = perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext, 0x80, 0x1, 0x2e, 0x0, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ac", 0x1, r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r3, &(0x7f0000000900)="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", 0x200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={<r4=>0x0}, &(0x7f0000000600)=0xc)
move_pages(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0xff, 0x80, 0x8, 0x0, 0x6, 0x40, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000280), 0xb}, 0x40000, 0x3, 0x8000, 0x5, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x0, 0xfffffffffffffffe}, r4, 0xa, r0, 0x0)
r5 = io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x808})
io_uring_register$IORING_REGISTER_FILES(r5, 0x17, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1)
sendfile(r1, r5, &(0x7f0000000240)=0x100000001, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x44000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
close(0xffffffffffffffff)
sendfile(r3, r6, 0x0, 0xfdef)

21:02:24 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200004000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:24 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb2000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:24 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x540d, &(0x7f0000000140))

21:02:24 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40054, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:02:24 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 1)

[ 1859.973293] set_capacity_and_notify: 4 callbacks suppressed
[ 1859.973307] loop3: detected capacity change from 0 to 512
[ 1859.991540] loop4: detected capacity change from 0 to 4132
[ 1860.000211] FAULT_INJECTION: forcing a failure.
[ 1860.000211] name failslab, interval 1, probability 0, space 0, times 0
[ 1860.001183] CPU: 1 UID: 0 PID: 13041 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1860.001200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1860.001207] Call Trace:
[ 1860.001211]  <TASK>
[ 1860.001216]  dump_stack_lvl+0xfa/0x120
[ 1860.001242]  should_fail_ex+0x4d7/0x5e0
[ 1860.001259]  ? __do_sys_memfd_create+0x1e5/0xaa0
[ 1860.001274]  should_failslab+0xc2/0x120
[ 1860.001292]  __kmalloc_cache_noprof+0x80/0x730
[ 1860.001318]  ? __do_sys_memfd_create+0x1e5/0xaa0
[ 1860.001332]  __do_sys_memfd_create+0x1e5/0xaa0
[ 1860.001346]  ? ksys_write+0x1a3/0x240
[ 1860.001361]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1860.001374]  ? irqentry_exit+0xee/0x650
[ 1860.001391]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1860.001408]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1860.001430]  do_syscall_64+0xbf/0x420
[ 1860.001443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1860.001456] RIP: 0033:0x7ff2f975db19
[ 1860.001466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1860.001478] RSP: 002b:00007ff2f6cd2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1860.001490] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff2f975db19
[ 1860.001499] RDX: 0000000000204800 RSI: 0000000000000000 RDI: 00007ff2f97b70fb
[ 1860.001506] RBP: 0000000000000003 R08: 4000000000002400 R09: ffffffffffffffff
[ 1860.001513] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1860.001521] R13: 0000000020000100 R14: 0000000000204800 R15: 0000000020013e00
[ 1860.001537]  </TASK>
[ 1860.017761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1860.023059] loop1: detected capacity change from 0 to 264192
[ 1860.023474] EXT4-fs (loop4): inodes count not valid: 262176 vs 32
[ 1860.026302] loop5: detected capacity change from 0 to 512
[ 1860.029607] loop4: detected capacity change from 0 to 4132
[ 1860.034217] EXT4-fs (loop4): inodes count not valid: 262176 vs 32
[ 1860.039732] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1860.041771] EXT4-fs (loop1): group descriptors corrupted!
21:02:24 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x5d0, 0x0)

21:02:24 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x540e, &(0x7f0000000140))

[ 1860.076759] loop1: detected capacity change from 0 to 264192
[ 1860.080628] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1860.082420] EXT4-fs (loop1): group descriptors corrupted!
[ 1860.091107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:02:24 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200005000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:24 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 60)

21:02:24 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 2)

[ 1860.106743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:02:24 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb3000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1860.129667] loop4: detected capacity change from 0 to 4132
[ 1860.134806] EXT4-fs (loop4): inodes count not valid: 327712 vs 32
[ 1860.166705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1860.171625] loop4: detected capacity change from 0 to 4132
[ 1860.182593] loop1: detected capacity change from 0 to 264192
21:02:24 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x602, 0x0)

[ 1860.190470] EXT4-fs (loop4): inodes count not valid: 327712 vs 32
21:02:24 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4005c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1860.196308] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1860.197236] EXT4-fs (loop1): group descriptors corrupted!
[ 1860.216887] loop1: detected capacity change from 0 to 264192
[ 1860.219636] FAULT_INJECTION: forcing a failure.
[ 1860.219636] name failslab, interval 1, probability 0, space 0, times 0
[ 1860.220625] CPU: 1 UID: 0 PID: 13054 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1860.220642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1860.220650] Call Trace:
[ 1860.220655]  <TASK>
[ 1860.220660]  dump_stack_lvl+0xfa/0x120
[ 1860.220686]  should_fail_ex+0x4d7/0x5e0
[ 1860.220704]  ? security_inode_alloc+0x3e/0x130
[ 1860.220719]  should_failslab+0xc2/0x120
[ 1860.220737]  kmem_cache_alloc_noprof+0x80/0x710
[ 1860.220749]  ? __pfx_map_id_range_down+0x10/0x10
[ 1860.220774]  ? security_inode_alloc+0x3e/0x130
[ 1860.220786]  security_inode_alloc+0x3e/0x130
[ 1860.220801]  inode_init_always_gfp+0xc9d/0xff0
[ 1860.220822]  alloc_inode+0x8d/0x250
[ 1860.220834]  new_inode+0x1e/0x160
[ 1860.220847]  __ext4_new_inode+0x35d/0x4cd0
[ 1860.220871]  ? avc_has_perm_noaudit+0x150/0x3d0
[ 1860.220891]  ? __pfx___ext4_new_inode+0x10/0x10
[ 1860.220910]  ? __pfx_avc_has_perm+0x10/0x10
[ 1860.220927]  ? __pfx___dquot_initialize+0x10/0x10
[ 1860.220953]  ext4_mkdir+0x331/0xb30
[ 1860.220973]  ? __pfx_ext4_mkdir+0x10/0x10
[ 1860.220986]  ? security_inode_permission+0x72/0xe0
[ 1860.221009]  vfs_mkdir+0x7b5/0xba0
[ 1860.221026]  do_mkdirat+0x11a/0x450
[ 1860.221044]  ? __pfx_do_mkdirat+0x10/0x10
[ 1860.221061]  ? strncpy_from_user+0x21b/0x2f0
[ 1860.221084]  __x64_sys_mkdir+0xf3/0x140
[ 1860.221102]  do_syscall_64+0xbf/0x420
[ 1860.221116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1860.221129] RIP: 0033:0x7fedf4848c27
[ 1860.221140] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1860.221151] RSP: 002b:00007fedf1dbefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1860.221163] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4848c27
[ 1860.221171] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1860.221178] RBP: 00007fedf1dbf040 R08: 0000000000000000 R09: ffffffffffffffff
[ 1860.221186] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1860.221193] R13: 0000000020000100 R14: 00007fedf1dbf000 R15: 0000000020013a00
[ 1860.221211]  </TASK>
[ 1860.254904] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1860.255744] EXT4-fs (loop1): group descriptors corrupted!
[ 1860.277554] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 1860.288761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:02:24 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x603, 0x0)

21:02:24 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb4000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1860.371258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1860.388273] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1860.389093] EXT4-fs (loop1): group descriptors corrupted!
[ 1860.402736] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1860.403652] EXT4-fs (loop1): group descriptors corrupted!
21:02:33 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 3)

21:02:33 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200005000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:33 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x604, 0x0)

21:02:33 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 61)

21:02:33 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40060, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:02:33 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xbc040000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:33 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200006000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:33 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x540f, &(0x7f0000000140))

[ 1869.611217] FAULT_INJECTION: forcing a failure.
[ 1869.611217] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1869.613426] CPU: 0 UID: 0 PID: 13088 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1869.613461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1869.613476] Call Trace:
[ 1869.613485]  <TASK>
[ 1869.613495]  dump_stack_lvl+0xfa/0x120
[ 1869.613545]  should_fail_ex+0x4d7/0x5e0
[ 1869.613579]  strncpy_from_user+0x3b/0x2f0
[ 1869.613623]  __do_sys_memfd_create+0x21d/0xaa0
[ 1869.613640] set_capacity_and_notify: 5 callbacks suppressed
[ 1869.613658] loop4: detected capacity change from 0 to 4132
[ 1869.613655]  ? ksys_write+0x1a3/0x240
[ 1869.613688]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1869.613717]  ? irqentry_exit+0xee/0x650
[ 1869.613755]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1869.613791]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1869.613836]  do_syscall_64+0xbf/0x420
[ 1869.613864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1869.613891] RIP: 0033:0x7ff2f975db19
[ 1869.613911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1869.613937] RSP: 002b:00007ff2f6cd2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1869.613971] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff2f975db19
[ 1869.613988] RDX: 0000000000204800 RSI: 0000000000000000 RDI: 00007ff2f97b70fb
[ 1869.614005] RBP: 0000000000000003 R08: 4000000000002400 R09: ffffffffffffffff
[ 1869.614021] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1869.614038] R13: 0000000020000100 R14: 0000000000204800 R15: 0000000020013e00
[ 1869.614071]  </TASK>
[ 1869.627995] loop1: detected capacity change from 0 to 264192
[ 1869.645905] loop3: detected capacity change from 0 to 512
[ 1869.648874] loop5: detected capacity change from 0 to 512
[ 1869.688273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:02:33 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x605, 0x0)

[ 1869.699355] EXT4-fs (loop4): inodes count not valid: 393248 vs 32
[ 1869.699627] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1869.701707] EXT4-fs (loop1): group descriptors corrupted!
21:02:33 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 4)

[ 1869.713857] loop1: detected capacity change from 0 to 264192
[ 1869.724233] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1869.725671] EXT4-fs (loop1): group descriptors corrupted!
21:02:33 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5410, &(0x7f0000000140))

21:02:33 executing program 7:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_script(r0, 0x0, 0x144)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x6, 0xeb8, 0xff, 0xfffffffffffffffb, 0x1, 0x20})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000040))
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

[ 1869.741472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1869.752214] loop4: detected capacity change from 0 to 4132
[ 1869.758305] EXT4-fs (loop4): inodes count not valid: 393248 vs 32
21:02:33 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4008c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:02:33 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200007000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1869.811326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:02:33 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 62)

[ 1869.840706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:02:33 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x606, 0x0)

21:02:33 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0030000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1869.882565] FAULT_INJECTION: forcing a failure.
[ 1869.882565] name failslab, interval 1, probability 0, space 0, times 0
[ 1869.884267] CPU: 0 UID: 0 PID: 13108 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1869.884296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1869.884309] Call Trace:
[ 1869.884317]  <TASK>
[ 1869.884326]  dump_stack_lvl+0xfa/0x120
[ 1869.884368]  should_fail_ex+0x4d7/0x5e0
[ 1869.884397]  ? shmem_alloc_inode+0x27/0x50
[ 1869.884422]  should_failslab+0xc2/0x120
[ 1869.884453]  kmem_cache_alloc_lru_noprof+0x84/0x720
[ 1869.884486]  ? shmem_alloc_inode+0x27/0x50
[ 1869.884509]  shmem_alloc_inode+0x27/0x50
[ 1869.884532]  ? __pfx_shmem_alloc_inode+0x10/0x10
[ 1869.884555]  alloc_inode+0x67/0x250
[ 1869.884578]  new_inode+0x1e/0x160
[ 1869.884600]  __shmem_get_inode+0x17c/0xe80
[ 1869.884633]  __shmem_file_setup+0x108/0x370
[ 1869.884665]  __do_sys_memfd_create+0x2ce/0xaa0
[ 1869.884691]  ? ksys_write+0x1a3/0x240
[ 1869.884718]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1869.884742]  ? irqentry_exit+0xee/0x650
[ 1869.884774]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1869.884804]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1869.884841]  do_syscall_64+0xbf/0x420
[ 1869.884864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1869.884887] RIP: 0033:0x7ff2f975db19
[ 1869.884905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1869.884926] RSP: 002b:00007ff2f6cd2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1869.884955] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff2f975db19
[ 1869.884970] RDX: 0000000000204800 RSI: 0000000000000000 RDI: 00007ff2f97b70fb
[ 1869.884984] RBP: 0000000000000003 R08: 4000000000002400 R09: ffffffffffffffff
[ 1869.884998] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1869.885012] R13: 0000000020000100 R14: 0000000000204800 R15: 0000000020013e00
[ 1869.885040]  </TASK>
21:02:34 executing program 7:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:ipmi_device_t:s0\x00', 0x21, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fadvise64(r1, 0x400, 0x2, 0x3)
fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:ipmi_device_t:s0\x00', 0x21, 0x0)

[ 1869.970790] loop4: detected capacity change from 0 to 4132
[ 1869.971456] loop1: detected capacity change from 0 to 264192
[ 1869.997721] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1869.998037] EXT4-fs (loop4): inodes count not valid: 458784 vs 32
[ 1869.999195] EXT4-fs (loop1): group descriptors corrupted!
[ 1870.002829] loop5: detected capacity change from 0 to 512
[ 1870.017261] loop4: detected capacity change from 0 to 4132
[ 1870.024265] EXT4-fs (loop4): inodes count not valid: 458784 vs 32
[ 1870.045762] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1870.047329] EXT4-fs (loop1): group descriptors corrupted!
[ 1870.084620] SELinux:  Context system_u:object_r:ipmi_device_t:s is not valid (left unmapped).
[ 1870.089564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1870.125417] FAULT_INJECTION: forcing a failure.
[ 1870.125417] name failslab, interval 1, probability 0, space 0, times 0
[ 1870.127237] CPU: 0 UID: 0 PID: 13124 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1870.127269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1870.127282] Call Trace:
[ 1870.127291]  <TASK>
[ 1870.127300]  dump_stack_lvl+0xfa/0x120
[ 1870.127345]  should_fail_ex+0x4d7/0x5e0
[ 1870.127375]  ? jbd2__journal_start+0x193/0x820
[ 1870.127404]  should_failslab+0xc2/0x120
[ 1870.127437]  kmem_cache_alloc_noprof+0x80/0x710
[ 1870.127464]  ? lock_is_held_type+0x9e/0x120
[ 1870.127518]  ? jbd2__journal_start+0x193/0x820
[ 1870.127545]  jbd2__journal_start+0x193/0x820
[ 1870.127578]  __ext4_journal_start_sb+0x325/0x580
[ 1870.127620]  __ext4_new_inode+0x2c81/0x4cd0
[ 1870.127670]  ? __pfx___ext4_new_inode+0x10/0x10
[ 1870.127707]  ? __pfx_avc_has_perm+0x10/0x10
[ 1870.127741]  ? __pfx___dquot_initialize+0x10/0x10
[ 1870.127781]  ext4_mkdir+0x331/0xb30
[ 1870.127816]  ? __pfx_ext4_mkdir+0x10/0x10
[ 1870.127841]  ? security_inode_permission+0x72/0xe0
[ 1870.127879]  vfs_mkdir+0x7b5/0xba0
[ 1870.127909]  do_mkdirat+0x11a/0x450
[ 1870.127943]  ? __pfx_do_mkdirat+0x10/0x10
[ 1870.127983]  ? strncpy_from_user+0x21b/0x2f0
[ 1870.128027]  __x64_sys_mkdir+0xf3/0x140
[ 1870.128061]  do_syscall_64+0xbf/0x420
[ 1870.128086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1870.128110] RIP: 0033:0x7fedf4848c27
[ 1870.128129] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1870.128152] RSP: 002b:00007fedf1dbefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1870.128174] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4848c27
[ 1870.128190] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1870.128205] RBP: 00007fedf1dbf040 R08: 0000000000000000 R09: ffffffffffffffff
[ 1870.128220] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1870.128235] R13: 0000000020000100 R14: 00007fedf1dbf000 R15: 0000000020013a00
[ 1870.128266]  </TASK>
[ 1870.157272] EXT4-fs error (device sda) in __ext4_new_inode:1086: Out of memory
[ 1870.233273] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:02:42 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x607, 0x0)

21:02:42 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000140))

21:02:42 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40097, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:02:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 63)

21:02:42 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200008000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:42 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0ed0000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:42 executing program 7:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f0000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010a00)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010d00)="2200170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000012a00))
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}})

21:02:42 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 5)

[ 1878.326586] set_capacity_and_notify: 2 callbacks suppressed
[ 1878.326613] loop1: detected capacity change from 0 to 264192
[ 1878.333573] loop3: detected capacity change from 0 to 512
[ 1878.335011] loop5: detected capacity change from 0 to 512
[ 1878.356089] loop2: detected capacity change from 0 to 4132
21:02:42 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x60a, 0x0)

[ 1878.361474] loop4: detected capacity change from 0 to 4132
[ 1878.364296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1878.365359] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1878.365973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1878.367244] EXT4-fs (loop1): group descriptors corrupted!
[ 1878.384219] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 1878.386202] loop1: detected capacity change from 0 to 264192
[ 1878.398050] EXT4-fs (loop4): inodes count not valid: 524320 vs 32
[ 1878.404303] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1878.405255] EXT4-fs (loop1): group descriptors corrupted!
[ 1878.415585] loop4: detected capacity change from 0 to 4132
[ 1878.418280] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1878.427825] EXT4-fs (loop4): inodes count not valid: 524320 vs 32
21:02:42 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400b9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:02:42 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0xd, 0xa, 0x3}, 0x14}}, 0x0)

21:02:42 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 6)

21:02:42 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5413, &(0x7f0000000140))

[ 1878.465336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:02:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 64)

21:02:42 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc2e40100, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1878.498421] loop5: detected capacity change from 0 to 512
[ 1878.501395] FAULT_INJECTION: forcing a failure.
[ 1878.501395] name failslab, interval 1, probability 0, space 0, times 0
[ 1878.502386] CPU: 1 UID: 0 PID: 13162 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1878.502404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1878.502412] Call Trace:
[ 1878.502417]  <TASK>
[ 1878.502421]  dump_stack_lvl+0xfa/0x120
[ 1878.502451]  should_fail_ex+0x4d7/0x5e0
[ 1878.502469]  ? security_inode_alloc+0x3e/0x130
[ 1878.502485]  should_failslab+0xc2/0x120
[ 1878.502504]  kmem_cache_alloc_noprof+0x80/0x710
[ 1878.502517]  ? __pfx_map_id_range_down+0x10/0x10
[ 1878.502537]  ? __create_object+0x59/0x80
[ 1878.502552]  ? security_inode_alloc+0x3e/0x130
[ 1878.502566]  security_inode_alloc+0x3e/0x130
[ 1878.502581]  inode_init_always_gfp+0xc9d/0xff0
[ 1878.502600]  alloc_inode+0x8d/0x250
[ 1878.502612]  new_inode+0x1e/0x160
[ 1878.502624]  __shmem_get_inode+0x17c/0xe80
[ 1878.502644]  __shmem_file_setup+0x108/0x370
[ 1878.502662]  __do_sys_memfd_create+0x2ce/0xaa0
[ 1878.502677]  ? ksys_write+0x1a3/0x240
[ 1878.502693]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1878.502706]  ? irqentry_exit+0xee/0x650
[ 1878.502724]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1878.502742]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1878.502765]  do_syscall_64+0xbf/0x420
[ 1878.502778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1878.502792] RIP: 0033:0x7ff2f975db19
[ 1878.502802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1878.502814] RSP: 002b:00007ff2f6cd2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1878.502826] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff2f975db19
[ 1878.502836] RDX: 0000000000204800 RSI: 0000000000000000 RDI: 00007ff2f97b70fb
[ 1878.502843] RBP: 0000000000000003 R08: 4000000000002400 R09: ffffffffffffffff
[ 1878.502851] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1878.502859] R13: 0000000020000100 R14: 0000000000204800 R15: 0000000020013e00
[ 1878.502874]  </TASK>
[ 1878.557938] loop3: detected capacity change from 0 to 512
[ 1878.565233] FAULT_INJECTION: forcing a failure.
[ 1878.565233] name failslab, interval 1, probability 0, space 0, times 0
[ 1878.566412] CPU: 1 UID: 0 PID: 13169 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1878.566429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1878.566437] Call Trace:
[ 1878.566442]  <TASK>
[ 1878.566447]  dump_stack_lvl+0xfa/0x120
[ 1878.566473]  should_fail_ex+0x4d7/0x5e0
[ 1878.566491]  should_failslab+0xc2/0x120
[ 1878.566509]  __kmalloc_noprof+0xd6/0x830
[ 1878.566530]  ? security_inode_init_security+0x113/0x370
[ 1878.566547]  ? security_inode_init_security+0x113/0x370
[ 1878.566559]  security_inode_init_security+0x113/0x370
[ 1878.566573]  ? __pfx_ext4_initxattrs+0x10/0x10
[ 1878.566589]  ? __pfx_security_inode_init_security+0x10/0x10
[ 1878.566604]  ? crc32c+0x1ae/0x350
[ 1878.566619]  __ext4_new_inode+0x38f7/0x4cd0
[ 1878.566645]  ? __pfx___ext4_new_inode+0x10/0x10
[ 1878.566666]  ? __pfx___dquot_initialize+0x10/0x10
[ 1878.566687]  ext4_mkdir+0x331/0xb30
[ 1878.566706]  ? __pfx_ext4_mkdir+0x10/0x10
[ 1878.566718]  ? security_inode_permission+0x72/0xe0
[ 1878.566738]  vfs_mkdir+0x7b5/0xba0
[ 1878.566755]  do_mkdirat+0x11a/0x450
[ 1878.566774]  ? __pfx_do_mkdirat+0x10/0x10
[ 1878.566790]  ? strncpy_from_user+0x21b/0x2f0
[ 1878.566813]  __x64_sys_mkdir+0xf3/0x140
[ 1878.566830]  do_syscall_64+0xbf/0x420
[ 1878.566843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1878.566857] RIP: 0033:0x7fedf4848c27
[ 1878.566866] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1878.566879] RSP: 002b:00007fedf1dbefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1878.566891] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fedf4848c27
[ 1878.566900] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1878.566908] RBP: 00007fedf1dbf040 R08: 0000000000000000 R09: ffffffffffffffff
[ 1878.566916] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1878.566923] R13: 0000000020000100 R14: 00007fedf1dbf000 R15: 0000000020013a00
[ 1878.566940]  </TASK>
[ 1878.589832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1878.596145] loop1: detected capacity change from 0 to 264192
[ 1878.612433] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1878.613276] EXT4-fs (loop1): group descriptors corrupted!
[ 1878.639112] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1878.639895] EXT4-fs (loop1): group descriptors corrupted!
[ 1878.657235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:02:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 65)

21:02:52 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x63b, 0x0)

21:02:52 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5414, &(0x7f0000000140))

21:02:52 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000b000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:52 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf5000000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:52 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 7)

21:02:52 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f00000002c0)="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", 0x200}])
creat(&(0x7f0000000080)='./file0\x00', 0x80)

21:02:52 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400d7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1888.032239] set_capacity_and_notify: 1 callbacks suppressed
[ 1888.032265] loop3: detected capacity change from 0 to 512
[ 1888.058391] loop1: detected capacity change from 0 to 264192
[ 1888.059728] loop5: detected capacity change from 0 to 512
[ 1888.070091] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1888.071170] EXT4-fs (loop1): group descriptors corrupted!
[ 1888.075725] loop1: detected capacity change from 0 to 264192
[ 1888.078331] loop2: detected capacity change from 0 to 4132
[ 1888.084292] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1888.084312] EXT4-fs (loop1): group descriptors corrupted!
[ 1888.084312] loop4: detected capacity change from 0 to 4132
[ 1888.087986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1888.092433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1888.110007] EXT4-fs (loop4): inodes count not valid: 720928 vs 32
[ 1888.113228] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 1888.130612] loop4: detected capacity change from 0 to 4132
[ 1888.161666] EXT4-fs (loop4): inodes count not valid: 720928 vs 32
21:02:52 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:52 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x900, 0x0)

[ 1888.169522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:02:52 executing program 7:
rt_sigqueueinfo(0xffffffffffffffff, 0x39, &(0x7f0000000040)={0x15, 0xff5, 0xffff})
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[])

21:02:52 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400db, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:02:52 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5415, &(0x7f0000000140))

21:02:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) (fail_nth: 66)

21:02:52 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 8)

21:02:52 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200018000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1888.228526] loop4: detected capacity change from 0 to 4132
[ 1888.231632] EXT4-fs (loop4): inodes count not valid: 1572896 vs 32
[ 1888.234495] loop4: detected capacity change from 0 to 4132
[ 1888.236617] EXT4-fs (loop4): inodes count not valid: 1572896 vs 32
[ 1888.246271] loop1: detected capacity change from 0 to 264192
[ 1888.255169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1888.281452] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1888.282996] EXT4-fs (loop1): group descriptors corrupted!
21:02:52 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20001c000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1888.316461] FAULT_INJECTION: forcing a failure.
[ 1888.316461] name failslab, interval 1, probability 0, space 0, times 0
[ 1888.317515] CPU: 1 UID: 0 PID: 13215 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1888.317532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1888.317539] Call Trace:
[ 1888.317543]  <TASK>
[ 1888.317548]  dump_stack_lvl+0xfa/0x120
[ 1888.317574]  should_fail_ex+0x4d7/0x5e0
[ 1888.317591]  ? __d_alloc+0x34/0xa10
[ 1888.317609]  should_failslab+0xc2/0x120
[ 1888.317626]  kmem_cache_alloc_lru_noprof+0x84/0x720
[ 1888.317640]  ? find_held_lock+0x2b/0x80
[ 1888.317659]  ? __d_alloc+0x34/0xa10
[ 1888.317676]  __d_alloc+0x34/0xa10
[ 1888.317691]  ? mpol_shared_policy_init+0x24f/0x390
[ 1888.317708]  d_alloc_pseudo+0x1d/0xc0
[ 1888.317721]  alloc_file_pseudo+0xbe/0x220
[ 1888.317741]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1888.317759]  ? __shmem_get_inode+0x684/0xe80
[ 1888.317778]  __shmem_file_setup+0x1a8/0x370
[ 1888.317796]  __do_sys_memfd_create+0x2ce/0xaa0
[ 1888.317811]  ? ksys_write+0x1a3/0x240
[ 1888.317825]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1888.317838]  ? irqentry_exit+0xee/0x650
[ 1888.317856]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1888.317873]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1888.317893]  do_syscall_64+0xbf/0x420
[ 1888.317906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1888.317919] RIP: 0033:0x7ff2f975db19
[ 1888.317929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1888.317946] RSP: 002b:00007ff2f6cd2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1888.317958] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff2f975db19
[ 1888.317966] RDX: 0000000000204800 RSI: 0000000000000000 RDI: 00007ff2f97b70fb
[ 1888.317974] RBP: 0000000000000003 R08: 4000000000002400 R09: ffffffffffffffff
[ 1888.317981] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1888.317989] R13: 0000000020000100 R14: 0000000000204800 R15: 0000000020013e00
[ 1888.318004]  </TASK>
[ 1888.351458] EXT4-fs (loop4): inodes count not valid: 1835040 vs 32
[ 1888.370070] EXT4-fs (loop4): inodes count not valid: 1835040 vs 32
21:02:52 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x1100, 0x0)

21:02:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1888.385025] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1888.386672] EXT4-fs (loop1): group descriptors corrupted!
21:02:52 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200064000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:02:52 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5414, &(0x7f0000000140))

21:02:52 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5416, &(0x7f0000000140))

[ 1888.424837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:02:52 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 9)

[ 1888.466523] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1888.506564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1888.512668] EXT4-fs (loop4): inodes count not valid: 6553632 vs 32
[ 1888.514379] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 1888.523195] EXT4-fs (loop4): inodes count not valid: 6553632 vs 32
[ 1888.566630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:03:01 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x5f5e0ff, 0x0)

21:03:01 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf9fdffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:01 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5418, &(0x7f0000000140))

21:03:01 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xab33, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:01 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 10)

21:03:01 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000f0000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:01 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb100, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x4)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f00004d8000/0x3000)=nil, 0x2)

21:03:01 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400f0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1897.910345] set_capacity_and_notify: 8 callbacks suppressed
[ 1897.910359] loop5: detected capacity change from 0 to 512
[ 1897.922196] loop3: detected capacity change from 0 to 85
[ 1897.923559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1897.948679] loop4: detected capacity change from 0 to 4132
[ 1897.953265] EXT4-fs (loop4): inodes count not valid: 15728672 vs 32
21:03:02 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541b, &(0x7f0000000140))

[ 1897.964449] loop4: detected capacity change from 0 to 4132
[ 1897.971861] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 1897.972688] FAULT_INJECTION: forcing a failure.
[ 1897.972688] name failslab, interval 1, probability 0, space 0, times 0
[ 1897.974050] CPU: 1 UID: 0 PID: 13262 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1897.974067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1897.974075] Call Trace:
[ 1897.974080]  <TASK>
[ 1897.974086]  dump_stack_lvl+0xfa/0x120
[ 1897.974114]  should_fail_ex+0x4d7/0x5e0
[ 1897.974135]  ? alloc_empty_file+0x58/0x1e0
[ 1897.974155]  should_failslab+0xc2/0x120
[ 1897.974174]  kmem_cache_alloc_noprof+0x80/0x710
[ 1897.974187]  ? d_instantiate+0x92/0xb0
[ 1897.974209]  ? alloc_empty_file+0x58/0x1e0
[ 1897.974227]  ? _raw_spin_unlock+0x1e/0x40
[ 1897.974243]  alloc_empty_file+0x58/0x1e0
[ 1897.974262]  alloc_file_pseudo+0x12b/0x220
[ 1897.974281]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1897.974305]  __shmem_file_setup+0x1a8/0x370
[ 1897.974324]  __do_sys_memfd_create+0x2ce/0xaa0
[ 1897.974339]  ? ksys_write+0x1a3/0x240
[ 1897.974354]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1897.974367]  ? irqentry_exit+0xee/0x650
[ 1897.974386]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1897.974405]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1897.974427]  do_syscall_64+0xbf/0x420
[ 1897.974440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1897.974454] RIP: 0033:0x7ff2f975db19
[ 1897.974465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1897.974477] RSP: 002b:00007ff2f6cd2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1897.974490] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff2f975db19
[ 1897.974499] RDX: 0000000000204800 RSI: 0000000000000000 RDI: 00007ff2f97b70fb
[ 1897.974507] RBP: 0000000000000003 R08: 4000000000002400 R09: ffffffffffffffff
[ 1897.974515] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1897.974522] R13: 0000000020000100 R14: 0000000000204800 R15: 0000000020013e00
[ 1897.974538]  </TASK>
[ 1898.002584] loop1: detected capacity change from 0 to 264192
[ 1898.004380] EXT4-fs (loop4): inodes count not valid: 15728672 vs 32
[ 1898.046817] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
21:03:02 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400fe, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1898.048296] EXT4-fs (loop1): group descriptors corrupted!
[ 1898.072305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:03:02 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 11)

21:03:02 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0xe5, 0x4)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x1ff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e25, 0x404, @dev={0xfe, 0x80, '\x00', 0x31}, 0x1b}, 0x1c)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100)=@dstopts={0x2, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x1}]}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @private2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000480)="69f879c56b8d56ee48c690a3e8097bc136b9a91eb9ce4aed86c622b971ae9c025addcfeccd2e7377c3db003410f693c43d74ef4eaa3703b196032b75a5b0b3e910877e7d538ba7124ce60855014503270e57b509f2b06a30a70c8714064037705df10fbbb412773edbd36e48", 0x6c}], 0x1}}], 0x3, 0x4c890)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r0, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

[ 1898.103618] loop1: detected capacity change from 0 to 264192
[ 1898.114347] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1898.115267] EXT4-fs (loop1): group descriptors corrupted!
[ 1898.176750] loop2: detected capacity change from 0 to 4132
[ 1898.200591] EXT4-fs (loop2): inodes count not valid: 5 vs 32
21:03:10 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 12)

21:03:10 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xab51, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:10 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40144, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:10 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000f5000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:10 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541d, &(0x7f0000000140))

21:03:10 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x0)

21:03:10 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfbffffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:10 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000010900)="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", 0x1a0}], 0x0, &(0x7f0000011700))
mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x8000, 0x1)
fchdir(r0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x8, 0xd0, 0x0, 0x2, 0x0, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x408c0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x4)

[ 1906.655151] loop4: detected capacity change from 0 to 4132
[ 1906.662343] EXT4-fs (loop4): inodes count not valid: 16056352 vs 32
[ 1906.671550] loop4: detected capacity change from 0 to 4132
21:03:10 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541e, &(0x7f0000000140))

[ 1906.679502] EXT4-fs (loop4): inodes count not valid: 16056352 vs 32
[ 1906.685642] loop3: detected capacity change from 0 to 85
[ 1906.695432] loop5: detected capacity change from 0 to 512
[ 1906.704581] FAULT_INJECTION: forcing a failure.
[ 1906.704581] name failslab, interval 1, probability 0, space 0, times 0
[ 1906.706296] CPU: 0 UID: 0 PID: 13299 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1906.706334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1906.706351] Call Trace:
[ 1906.706360]  <TASK>
[ 1906.706369]  dump_stack_lvl+0xfa/0x120
[ 1906.706413]  should_fail_ex+0x4d7/0x5e0
[ 1906.706443]  ? security_file_alloc+0x35/0x130
[ 1906.706474]  should_failslab+0xc2/0x120
[ 1906.706506]  kmem_cache_alloc_noprof+0x80/0x710
[ 1906.706529]  ? __create_object+0x59/0x80
[ 1906.706557]  ? security_file_alloc+0x35/0x130
[ 1906.706586]  security_file_alloc+0x35/0x130
[ 1906.706617]  init_file+0x95/0x4c0
[ 1906.706651]  alloc_empty_file+0x76/0x1e0
[ 1906.706686]  alloc_file_pseudo+0x12b/0x220
[ 1906.706722]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1906.706766]  __shmem_file_setup+0x1a8/0x370
[ 1906.706799]  __do_sys_memfd_create+0x2ce/0xaa0
[ 1906.706825]  ? ksys_write+0x1a3/0x240
[ 1906.706861]  ? __pfx___do_sys_memfd_create+0x10/0x10
[ 1906.706884]  ? irqentry_exit+0xee/0x650
[ 1906.706919]  ? trace_hardirqs_on_prepare+0xe3/0x110
[ 1906.706958]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1906.706996]  do_syscall_64+0xbf/0x420
[ 1906.707020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1906.707043] RIP: 0033:0x7ff2f975db19
[ 1906.707061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1906.707083] RSP: 002b:00007ff2f6cd2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1906.707105] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff2f975db19
[ 1906.707121] RDX: 0000000000204800 RSI: 0000000000000000 RDI: 00007ff2f97b70fb
[ 1906.707134] RBP: 0000000000000003 R08: 4000000000002400 R09: ffffffffffffffff
[ 1906.707149] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1906.707163] R13: 0000000020000100 R14: 0000000000204800 R15: 0000000020013e00
[ 1906.707191]  </TASK>
[ 1906.733373] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 1906.739791] loop1: detected capacity change from 0 to 264192
[ 1906.748869] loop3: detected capacity change from 0 to 85
[ 1906.750504] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1906.751988] EXT4-fs (loop1): group descriptors corrupted!
21:03:10 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000fe000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1906.765519] loop1: detected capacity change from 0 to 264192
[ 1906.766524] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 1906.775785] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1906.777408] EXT4-fs (loop1): group descriptors corrupted!
21:03:10 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000010900)="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", 0x1a0}], 0x0, &(0x7f0000011700))
mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x8000, 0x1)
fchdir(r0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x0, 0x8, 0xd0, 0x0, 0x2, 0x0, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x408c0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x4)

21:03:10 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x2)

[ 1906.792292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:03:10 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541e, &(0x7f0000000140))

21:03:10 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1906.841865] loop4: detected capacity change from 0 to 4132
[ 1906.863777] EXT4-fs (loop4): inodes count not valid: 16646176 vs 32
[ 1906.896124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1906.906688] loop3: detected capacity change from 0 to 120
[ 1906.916784] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1906.925597] loop3: detected capacity change from 0 to 120
[ 1906.928667] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
21:03:19 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5421, &(0x7f0000000140))

21:03:19 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:19 executing program 7:
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x8004}, 0x0)
prlimit64(0x0, 0x9, &(0x7f0000000000)={0x7, 0x244}, 0x0)
syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240))

21:03:19 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000030002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:19 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40180, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:19 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 13)

21:03:19 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf009, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:19 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x3)

[ 1915.039364] loop5: detected capacity change from 0 to 512
[ 1915.042865] loop4: detected capacity change from 0 to 4132
[ 1915.053917] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32
[ 1915.058796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1915.064343] loop4: detected capacity change from 0 to 4132
[ 1915.068803] EXT4-fs (loop4): inodes count not valid: 50331680 vs 32
[ 1915.075137] loop2: detected capacity change from 0 to 4132
[ 1915.077680] loop3: detected capacity change from 0 to 120
[ 1915.082664] loop1: detected capacity change from 0 to 264192
[ 1915.109182] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 1915.110189] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1915.125799] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1915.127280] EXT4-fs (loop1): group descriptors corrupted!
[ 1915.141242] loop3: detected capacity change from 0 to 120
[ 1915.143564] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1915.148227] loop1: detected capacity change from 0 to 264192
[ 1915.150996] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1915.151830] EXT4-fs (loop1): group descriptors corrupted!
21:03:19 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0xa4}, {0x6}]})
pidfd_open(0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x410800, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r2, 0x0, 0xffffffffffffffff, 0x200})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r2, 0x1, 0xffffffffffffffff, 0x81, 0x80000})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r3, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r2, 0x2, r3, 0x6})
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000180)={0x1, 0x0, 0xfb9e, 0x6})

21:03:19 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5422, &(0x7f0000000140))

21:03:19 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x4)

21:03:19 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000e8030002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:19 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x401a6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:19 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdffffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1915.187472] loop4: detected capacity change from 0 to 4132
[ 1915.190385] EXT4-fs (loop4): inodes count not valid: 65536032 vs 32
[ 1915.190828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1915.193512] loop4: detected capacity change from 0 to 4132
[ 1915.199389] EXT4-fs (loop4): inodes count not valid: 65536032 vs 32
21:03:19 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200080040002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:19 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 14)

[ 1915.270077] audit: type=1326 audit(1764363799.377:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13354 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82160ebb19 code=0x0
21:03:19 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf00a, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:19 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x5)

[ 1915.311171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1915.323368] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1915.324232] EXT4-fs (loop1): group descriptors corrupted!
21:03:19 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x401b9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1915.347203] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1915.355936] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1915.357596] EXT4-fs (loop1): group descriptors corrupted!
21:03:19 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5423, &(0x7f0000000140))

[ 1915.364665] FAULT_INJECTION: forcing a failure.
[ 1915.364665] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1915.365705] CPU: 1 UID: 0 PID: 13372 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1915.365723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1915.365731] Call Trace:
[ 1915.365736]  <TASK>
[ 1915.365742]  dump_stack_lvl+0xfa/0x120
[ 1915.365770]  should_fail_ex+0x4d7/0x5e0
[ 1915.365789]  should_fail_alloc_page+0xe0/0x110
[ 1915.365809]  prepare_alloc_pages+0x1eb/0x550
[ 1915.365830]  __alloc_frozen_pages_noprof+0x17f/0x2000
[ 1915.365850]  ? __is_insn_slot_addr+0x2e/0x290
[ 1915.365867]  ? __is_insn_slot_addr+0x136/0x290
[ 1915.365881]  ? lock_release+0xc8/0x270
[ 1915.365901]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1915.365922]  ? __lock_acquire+0x453/0x2150
[ 1915.365945]  ? lock_is_held_type+0x9e/0x120
[ 1915.365968]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1915.365989]  ? policy_nodemask+0xeb/0x4e0
[ 1915.366003]  alloc_pages_mpol+0xed/0x340
[ 1915.366015]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1915.366027]  ? filemap_get_entry+0x1bb/0x3b0
[ 1915.366050]  ? __pfx_filemap_get_entry+0x10/0x10
[ 1915.366070]  folio_alloc_mpol_noprof+0x38/0xa0
[ 1915.366086]  shmem_alloc_folio+0x11b/0x140
[ 1915.366103]  shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
[ 1915.366128]  ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10
[ 1915.366148]  ? _raw_read_unlock+0x1e/0x40
[ 1915.366166]  ? simple_xattr_get+0x173/0x1d0
[ 1915.366189]  shmem_write_begin+0x194/0x3b0
[ 1915.366209]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1915.366225]  ? mark_held_locks+0x49/0x80
[ 1915.366240]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1915.366253]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1915.366269]  ? ktime_get_coarse_real_ts64_mg+0x213/0x2a0
[ 1915.366290]  generic_perform_write+0x391/0x810
[ 1915.366311]  ? __pfx_generic_perform_write+0x10/0x10
[ 1915.366329]  ? file_update_time_flags+0x24c/0x4f0
[ 1915.366351]  shmem_file_write_iter+0x111/0x140
[ 1915.366367]  vfs_write+0xbe9/0x1150
[ 1915.366383]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1915.366397]  ? __fget_files+0x34/0x3b0
[ 1915.366413]  ? __pfx_vfs_write+0x10/0x10
[ 1915.366438]  __x64_sys_pwrite64+0x1f1/0x260
[ 1915.366454]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1915.366475]  do_syscall_64+0xbf/0x420
[ 1915.366488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1915.366501] RIP: 0033:0x7ff2f9710ab7
[ 1915.366512] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1915.366524] RSP: 002b:00007ff2f6cd2f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1915.366536] RAX: ffffffffffffffda RBX: 00007ff2f97a7970 RCX: 00007ff2f9710ab7
[ 1915.366545] RDX: 0000000000000066 RSI: 0000000020010000 RDI: 0000000000000004
[ 1915.366553] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1915.366560] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004
[ 1915.366568] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
[ 1915.366583]  </TASK>
[ 1915.406895] EXT4-fs (loop4): inodes count not valid: 75497504 vs 32
21:03:19 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x6)

[ 1915.435490] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1915.437335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1915.457528] EXT4-fs (loop4): inodes count not valid: 75497504 vs 32
[ 1915.464520] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1915.476124] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1915.480800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:03:19 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:19 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x401c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1915.539257] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1915.541015] EXT4-fs (loop1): group descriptors corrupted!
21:03:19 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 15)

[ 1915.555411] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1915.557273] EXT4-fs (loop1): group descriptors corrupted!
[ 1915.595646] FAULT_INJECTION: forcing a failure.
[ 1915.595646] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1915.596888] CPU: 1 UID: 0 PID: 13390 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1915.596906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1915.596914] Call Trace:
[ 1915.596918]  <TASK>
[ 1915.596924]  dump_stack_lvl+0xfa/0x120
[ 1915.596957]  should_fail_ex+0x4d7/0x5e0
[ 1915.596974]  ? page_copy_sane+0xce/0x2b0
[ 1915.596994]  copy_folio_from_iter_atomic+0x383/0x1820
[ 1915.597013]  ? _raw_read_unlock+0x1e/0x40
[ 1915.597031]  ? simple_xattr_get+0x173/0x1d0
[ 1915.597053]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 1915.597068]  ? shmem_write_begin+0x1ab/0x3b0
[ 1915.597090]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1915.597106]  ? mark_held_locks+0x49/0x80
[ 1915.597124]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1915.597137]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1915.597153]  ? ktime_get_coarse_real_ts64_mg+0x213/0x2a0
[ 1915.597175]  generic_perform_write+0x1d7/0x810
[ 1915.597197]  ? __pfx_generic_perform_write+0x10/0x10
[ 1915.597214]  ? file_update_time_flags+0x24c/0x4f0
[ 1915.597237]  shmem_file_write_iter+0x111/0x140
[ 1915.597252]  vfs_write+0xbe9/0x1150
[ 1915.597270]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1915.597285]  ? __fget_files+0x34/0x3b0
[ 1915.597300]  ? __pfx_vfs_write+0x10/0x10
[ 1915.597325]  __x64_sys_pwrite64+0x1f1/0x260
[ 1915.597341]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1915.597362]  do_syscall_64+0xbf/0x420
[ 1915.597377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1915.597391] RIP: 0033:0x7ff2f9710ab7
[ 1915.597401] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1915.597413] RSP: 002b:00007ff2f6cd2f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1915.597426] RAX: ffffffffffffffda RBX: 00007ff2f97a7970 RCX: 00007ff2f9710ab7
[ 1915.597435] RDX: 0000000000000066 RSI: 0000000020010000 RDI: 0000000000000004
[ 1915.597443] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1915.597451] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004
[ 1915.597459] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
[ 1915.597475]  </TASK>
[ 1915.629570] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 1915.653586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1915.674256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1916.093771] audit: type=1326 audit(1764363800.205:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13354 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82160ebb19 code=0x0
21:03:29 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5424, &(0x7f0000000140))

21:03:29 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000050002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf013, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:29 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x7)

21:03:29 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xff0f0000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 16)

21:03:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x401d8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:29 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x6)

[ 1925.319273] set_capacity_and_notify: 13 callbacks suppressed
[ 1925.319300] loop1: detected capacity change from 0 to 264192
[ 1925.334606] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1925.336368] EXT4-fs (loop1): group descriptors corrupted!
[ 1925.342496] loop5: detected capacity change from 0 to 512
[ 1925.349257] FAULT_INJECTION: forcing a failure.
[ 1925.349257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1925.351316] CPU: 0 UID: 0 PID: 13410 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1925.351352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1925.351368] Call Trace:
[ 1925.351377]  <TASK>
[ 1925.351388]  dump_stack_lvl+0xfa/0x120
[ 1925.351440]  should_fail_ex+0x4d7/0x5e0
[ 1925.351470]  ? page_copy_sane+0xce/0x2b0
[ 1925.351502]  copy_folio_from_iter_atomic+0x383/0x1820
[ 1925.351545]  ? avc_has_perm+0x12b/0x1d0
[ 1925.351589]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 1925.351622]  ? shmem_write_begin+0x1ab/0x3b0
[ 1925.351663]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1925.351699]  ? mark_held_locks+0x49/0x80
[ 1925.351735]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1925.351764]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[ 1925.351797]  ? ktime_get_coarse_real_ts64_mg+0x213/0x2a0
[ 1925.351844]  generic_perform_write+0x1d7/0x810
[ 1925.351907]  ? __pfx_generic_perform_write+0x10/0x10
[ 1925.351953]  ? file_update_time_flags+0x24c/0x4f0
[ 1925.352001]  shmem_file_write_iter+0x111/0x140
[ 1925.352036]  vfs_write+0xbe9/0x1150
[ 1925.352071]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1925.352103]  ? __fget_files+0x34/0x3b0
[ 1925.352136]  ? __pfx_vfs_write+0x10/0x10
[ 1925.352192]  __x64_sys_pwrite64+0x1f1/0x260
[ 1925.352229]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1925.352275]  do_syscall_64+0xbf/0x420
[ 1925.352305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1925.352333] RIP: 0033:0x7ff2f9710ab7
[ 1925.352354] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1925.352380] RSP: 002b:00007ff2f6cd2f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1925.352406] RAX: ffffffffffffffda RBX: 00007ff2f97a7970 RCX: 00007ff2f9710ab7
[ 1925.352424] RDX: 000000000000001f RSI: 0000000020010100 RDI: 0000000000000004
[ 1925.352441] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1925.352457] R10: 00000000000004e0 R11: 0000000000000293 R12: 0000000000000004
[ 1925.352474] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001
[ 1925.352509]  </TASK>
[ 1925.380788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1925.390929] loop1: detected capacity change from 0 to 264192
[ 1925.393810] loop3: detected capacity change from 0 to 120
[ 1925.396515] loop4: detected capacity change from 0 to 4132
[ 1925.404695] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1925.405619] EXT4-fs (loop1): group descriptors corrupted!
[ 1925.414611] EXT4-fs (loop4): inodes count not valid: 83886112 vs 32
[ 1925.428990] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1925.429505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1925.434557] loop4: detected capacity change from 0 to 4132
[ 1925.445434] loop3: detected capacity change from 0 to 120
[ 1925.450240] EXT4-fs (loop4): inodes count not valid: 83886112 vs 32
[ 1925.451842] loop2: detected capacity change from 0 to 4132
[ 1925.457010] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1925.458631] EXT4-fs (loop2): inodes count not valid: 5 vs 32
21:03:38 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5425, &(0x7f0000000140))

21:03:38 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 17)

21:03:38 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x8)

21:03:38 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000000000004000140000800c000100330000000000000004000000"], 0x24}], 0x1}, 0x0)

21:03:38 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x401f8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:38 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfff7ffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf014, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000060002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1934.060894] loop5: detected capacity change from 0 to 512
[ 1934.060940] loop1: detected capacity change from 0 to 264192
[ 1934.067085] loop4: detected capacity change from 0 to 4132
[ 1934.067297] FAULT_INJECTION: forcing a failure.
[ 1934.067297] name failslab, interval 1, probability 0, space 0, times 0
[ 1934.069518] CPU: 0 UID: 0 PID: 13439 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1934.069554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1934.069570] Call Trace:
[ 1934.069579]  <TASK>
[ 1934.069590]  dump_stack_lvl+0xfa/0x120
[ 1934.069640]  should_fail_ex+0x4d7/0x5e0
[ 1934.069676]  ? getname_flags.part.0+0x48/0x540
[ 1934.069700]  should_failslab+0xc2/0x120
[ 1934.069738]  kmem_cache_alloc_noprof+0x80/0x710
[ 1934.069777]  ? getname_flags.part.0+0x48/0x540
[ 1934.069801]  getname_flags.part.0+0x48/0x540
[ 1934.069830]  getname_flags+0x95/0xe0
[ 1934.069863]  do_sys_openat2+0x9f/0x240
[ 1934.069889]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1934.069931]  __x64_sys_openat+0x142/0x200
[ 1934.069966]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1934.070010]  do_syscall_64+0xbf/0x420
[ 1934.070040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1934.070066] RIP: 0033:0x7ff2f9710a04
[ 1934.070087] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1934.070112] RSP: 002b:00007ff2f6cd2ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1934.070138] RAX: ffffffffffffffda RBX: 00007ff2f97a7970 RCX: 00007ff2f9710a04
[ 1934.070156] RDX: 0000000000000002 RSI: 00007ff2f6cd3000 RDI: 00000000ffffff9c
[ 1934.070172] RBP: 00007ff2f6cd3000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1934.070189] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1934.070204] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1934.070242]  </TASK>
[ 1934.079888] EXT4-fs (loop4): inodes count not valid: 100663328 vs 32
[ 1934.092280] loop3: detected capacity change from 0 to 120
[ 1934.096852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1934.099214] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1934.100145] EXT4-fs (loop1): group descriptors corrupted!
[ 1934.104200] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1934.117168] loop1: detected capacity change from 0 to 264192
[ 1934.118341] loop3: detected capacity change from 0 to 120
21:03:38 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 18)

[ 1934.125176] loop4: detected capacity change from 0 to 4132
[ 1934.127489] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1934.128396] EXT4-fs (loop1): group descriptors corrupted!
[ 1934.134860] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1934.135974] EXT4-fs (loop4): inodes count not valid: 100663328 vs 32
[ 1934.166086] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:03:38 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4020e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:38 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$nbd(r1, &(0x7f0000000080)={0x67446698, 0x0, 0x3, 0x3, 0x3}, 0x10)
r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x3, 0x1}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000600)={<r6=>0x0, "415c14139a089fc6525a9a42d7fcd85a"})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001600)={{r0}, r5, 0x14, @unused=[0x2, 0x177c, 0x5c, 0x4], @devid=r6})
close_range(r2, 0xffffffffffffffff, 0x0)

[ 1934.210797] loop2: detected capacity change from 0 to 4132
21:03:38 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffbffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:38 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5427, &(0x7f0000000140))

21:03:38 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0xa)

21:03:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000070002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf015, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1934.230342] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 1934.269783] loop5: detected capacity change from 0 to 513
[ 1934.271166] loop4: detected capacity change from 0 to 4132
[ 1934.279462] EXT4-fs (loop4): inodes count not valid: 117440544 vs 32
[ 1934.292594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1934.296207] EXT4-fs (loop4): inodes count not valid: 117440544 vs 32
[ 1934.307124] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1934.308721] EXT4-fs (loop1): group descriptors corrupted!
[ 1934.338122] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1934.345403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1934.346927] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1934.353073] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1934.354039] EXT4-fs (loop1): group descriptors corrupted!
21:03:47 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 19)

21:03:47 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x402b0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:47 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$nbd(r1, &(0x7f0000000080)={0x67446698, 0x0, 0x3, 0x3, 0x3}, 0x10)
r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x3, 0x1}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000600)={<r6=>0x0, "415c14139a089fc6525a9a42d7fcd85a"})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001600)={{r0}, r5, 0x14, @unused=[0x2, 0x177c, 0x5c, 0x4], @devid=r6})
close_range(r2, 0xffffffffffffffff, 0x0)

21:03:47 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffe000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf016, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:47 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5428, &(0x7f0000000140))

21:03:47 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x10)

21:03:47 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000b0002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1943.050049] set_capacity_and_notify: 5 callbacks suppressed
[ 1943.050065] loop1: detected capacity change from 0 to 264192
[ 1943.052826] loop3: detected capacity change from 0 to 120
[ 1943.052913] loop5: detected capacity change from 0 to 513
[ 1943.062441] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1943.063464] EXT4-fs (loop1): group descriptors corrupted!
[ 1943.065072] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1943.066165] FAULT_INJECTION: forcing a failure.
[ 1943.066165] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1943.068372] CPU: 0 UID: 0 PID: 13487 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1943.068408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1943.068424] Call Trace:
[ 1943.068434]  <TASK>
[ 1943.068444]  dump_stack_lvl+0xfa/0x120
[ 1943.068493]  should_fail_ex+0x4d7/0x5e0
[ 1943.068529]  strncpy_from_user+0x3b/0x2f0
[ 1943.068573]  getname_flags.part.0+0x8d/0x540
[ 1943.068603]  getname_flags+0x95/0xe0
[ 1943.068634]  do_sys_openat2+0x9f/0x240
[ 1943.068660]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1943.068699]  __x64_sys_openat+0x142/0x200
[ 1943.068725]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1943.068766]  do_syscall_64+0xbf/0x420
[ 1943.068795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1943.068822] RIP: 0033:0x7ff2f9710a04
[ 1943.068843] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1943.068869] RSP: 002b:00007ff2f6cd2ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1943.068894] RAX: ffffffffffffffda RBX: 00007ff2f97a7970 RCX: 00007ff2f9710a04
[ 1943.068913] RDX: 0000000000000002 RSI: 00007ff2f6cd3000 RDI: 00000000ffffff9c
[ 1943.068929] RBP: 00007ff2f6cd3000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1943.068954] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1943.068970] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1943.069004]  </TASK>
21:03:47 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5429, &(0x7f0000000140))

[ 1943.105495] loop4: detected capacity change from 0 to 4132
[ 1943.110367] loop3: detected capacity change from 0 to 120
[ 1943.113760] loop1: detected capacity change from 0 to 264192
[ 1943.121869] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1943.125909] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1943.126816] EXT4-fs (loop1): group descriptors corrupted!
[ 1943.127730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1943.132670] EXT4-fs (loop4): inodes count not valid: 184549408 vs 32
[ 1943.150409] loop4: detected capacity change from 0 to 4132
[ 1943.155329] EXT4-fs (loop4): inodes count not valid: 184549408 vs 32
[ 1943.185403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:03:56 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 20)

21:03:56 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5437, &(0x7f0000000140))

21:03:56 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$nbd(r1, &(0x7f0000000080)={0x67446698, 0x0, 0x3, 0x3, 0x3}, 0x10)
r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x3, 0x1}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000600)={<r6=>0x0, "415c14139a089fc6525a9a42d7fcd85a"})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001600)={{r0}, r5, 0x14, @unused=[0x2, 0x177c, 0x5c, 0x4], @devid=r6})
close_range(r2, 0xffffffffffffffff, 0x0)

21:03:56 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000180002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:56 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffff000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x402b6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:56 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf017, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:56 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x300)

[ 1952.234987] loop5: detected capacity change from 0 to 513
[ 1952.237407] loop4: detected capacity change from 0 to 4132
[ 1952.241076] loop1: detected capacity change from 0 to 264192
[ 1952.248898] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1952.249827] EXT4-fs (loop1): group descriptors corrupted!
[ 1952.253291] loop1: detected capacity change from 0 to 264192
[ 1952.255736] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1952.256629] EXT4-fs (loop1): group descriptors corrupted!
[ 1952.260487] loop3: detected capacity change from 0 to 120
[ 1952.263275] FAULT_INJECTION: forcing a failure.
[ 1952.263275] name failslab, interval 1, probability 0, space 0, times 0
[ 1952.265374] CPU: 0 UID: 0 PID: 13524 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1952.265406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1952.265420] Call Trace:
[ 1952.265428]  <TASK>
[ 1952.265437]  dump_stack_lvl+0xfa/0x120
[ 1952.265481]  should_fail_ex+0x4d7/0x5e0
[ 1952.265512]  ? alloc_empty_file+0x58/0x1e0
[ 1952.265548]  should_failslab+0xc2/0x120
[ 1952.265580]  kmem_cache_alloc_noprof+0x80/0x710
[ 1952.265613]  ? alloc_empty_file+0x58/0x1e0
[ 1952.265647]  alloc_empty_file+0x58/0x1e0
[ 1952.265684]  path_openat+0xee/0x2d30
[ 1952.265729]  ? __pfx_path_openat+0x10/0x10
[ 1952.265771]  do_filp_open+0x1e8/0x450
[ 1952.265802]  ? __pfx_do_filp_open+0x10/0x10
[ 1952.265833]  ? __virt_addr_valid+0x2e8/0x5d0
[ 1952.265868]  ? find_held_lock+0x2b/0x80
[ 1952.265891]  ? alloc_fd+0x2c1/0x560
[ 1952.265919]  ? lock_release+0xc8/0x270
[ 1952.265961]  ? _raw_spin_unlock+0x1e/0x40
[ 1952.265991]  ? alloc_fd+0x2c1/0x560
[ 1952.266028]  do_sys_openat2+0x107/0x240
[ 1952.266051]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1952.266085]  __x64_sys_openat+0x142/0x200
[ 1952.266108]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1952.266144]  do_syscall_64+0xbf/0x420
[ 1952.266169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1952.266193] RIP: 0033:0x7ff2f9710a04
[ 1952.266212] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1952.266235] RSP: 002b:00007ff2f6cd2ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1952.266257] RAX: ffffffffffffffda RBX: 00007ff2f97a7970 RCX: 00007ff2f9710a04
[ 1952.266273] RDX: 0000000000000002 RSI: 00007ff2f6cd3000 RDI: 00000000ffffff9c
[ 1952.266288] RBP: 00007ff2f6cd3000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1952.266303] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1952.266317] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1952.266346]  </TASK>
[ 1952.296877] EXT4-fs (loop4): inodes count not valid: 402653216 vs 32
[ 1952.297042] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
21:03:56 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffff7ff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1952.317610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1952.336625] loop3: detected capacity change from 0 to 120
[ 1952.337647] loop4: detected capacity change from 0 to 4132
[ 1952.341752] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1952.342782] loop1: detected capacity change from 0 to 264192
[ 1952.342864] EXT4-fs (loop4): inodes count not valid: 402653216 vs 32
21:03:56 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000001c0002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:03:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x402b9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:56 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf01a, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:56 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x500)

[ 1952.390661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1952.394617] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1952.395524] EXT4-fs (loop1): group descriptors corrupted!
[ 1952.409529] loop1: detected capacity change from 0 to 264192
[ 1952.412692] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1952.413747] EXT4-fs (loop1): group descriptors corrupted!
[ 1952.437753] loop3: detected capacity change from 0 to 120
[ 1952.441586] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1952.457756] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
21:03:56 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5441, &(0x7f0000000140))

21:03:56 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5427, &(0x7f0000000140))

21:03:56 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffbff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1952.526431] EXT4-fs (loop4): inodes count not valid: 469762080 vs 32
21:03:56 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 21)

21:03:56 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf01b, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1952.547665] EXT4-fs (loop4): inodes count not valid: 469762080 vs 32
[ 1952.567656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:03:56 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000200002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1952.618868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:03:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1952.624624] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1952.626200] EXT4-fs (loop1): group descriptors corrupted!
21:03:56 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x600)

[ 1952.646649] FAULT_INJECTION: forcing a failure.
[ 1952.646649] name failslab, interval 1, probability 0, space 0, times 0
[ 1952.647751] CPU: 1 UID: 0 PID: 13551 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1952.647771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1952.647780] Call Trace:
[ 1952.647785]  <TASK>
[ 1952.647791]  dump_stack_lvl+0xfa/0x120
[ 1952.647821]  should_fail_ex+0x4d7/0x5e0
[ 1952.647842]  ? alloc_empty_file+0x58/0x1e0
[ 1952.647864]  should_failslab+0xc2/0x120
[ 1952.647884]  kmem_cache_alloc_noprof+0x80/0x710
[ 1952.647903]  ? alloc_empty_file+0x58/0x1e0
[ 1952.647922]  alloc_empty_file+0x58/0x1e0
[ 1952.647948]  path_openat+0xee/0x2d30
[ 1952.647975]  ? __pfx_path_openat+0x10/0x10
[ 1952.647999]  do_filp_open+0x1e8/0x450
[ 1952.648016]  ? __pfx_do_filp_open+0x10/0x10
[ 1952.648034]  ? __virt_addr_valid+0x2e8/0x5d0
[ 1952.648057]  ? find_held_lock+0x2b/0x80
[ 1952.648072]  ? alloc_fd+0x2c1/0x560
[ 1952.648089]  ? lock_release+0xc8/0x270
[ 1952.648117]  ? _raw_spin_unlock+0x1e/0x40
[ 1952.648135]  ? alloc_fd+0x2c1/0x560
[ 1952.648156]  do_sys_openat2+0x107/0x240
[ 1952.648169]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1952.648189]  __x64_sys_openat+0x142/0x200
[ 1952.648202]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1952.648223]  do_syscall_64+0xbf/0x420
[ 1952.648238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1952.648254] RIP: 0033:0x7ff2f9710a04
[ 1952.648265] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1952.648278] RSP: 002b:00007ff2f6cd2ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1952.648292] RAX: ffffffffffffffda RBX: 00007ff2f97a7970 RCX: 00007ff2f9710a04
[ 1952.648302] RDX: 0000000000000002 RSI: 00007ff2f6cd3000 RDI: 00000000ffffff9c
[ 1952.648311] RBP: 00007ff2f6cd3000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1952.648321] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1952.648329] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1952.648346]  </TASK>
21:03:56 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5450, &(0x7f0000000140))

21:03:56 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x8)

[ 1952.697093] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1952.704981] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1952.727251] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1952.728364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1952.728780] EXT4-fs (loop1): group descriptors corrupted!
[ 1952.739041] EXT4-fs (loop4): inodes count not valid: 536870944 vs 32
21:03:56 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf01c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:03:56 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40361, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1952.770973] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1952.777589] EXT4-fs (loop4): inodes count not valid: 536870944 vs 32
21:03:56 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 22)

[ 1952.851249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:03:56 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000400002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1952.881821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1952.933637] FAULT_INJECTION: forcing a failure.
[ 1952.933637] name failslab, interval 1, probability 0, space 0, times 0
[ 1952.934697] CPU: 1 UID: 0 PID: 13572 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1952.934714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1952.934722] Call Trace:
[ 1952.934727]  <TASK>
[ 1952.934732]  dump_stack_lvl+0xfa/0x120
[ 1952.934760]  should_fail_ex+0x4d7/0x5e0
[ 1952.934778]  ? security_file_alloc+0x35/0x130
[ 1952.934795]  should_failslab+0xc2/0x120
[ 1952.934814]  kmem_cache_alloc_noprof+0x80/0x710
[ 1952.934828]  ? __create_object+0x59/0x80
[ 1952.934844]  ? security_file_alloc+0x35/0x130
[ 1952.934859]  security_file_alloc+0x35/0x130
[ 1952.934875]  init_file+0x95/0x4c0
[ 1952.934895]  alloc_empty_file+0x76/0x1e0
[ 1952.934914]  path_openat+0xee/0x2d30
[ 1952.934942]  ? __pfx_path_openat+0x10/0x10
[ 1952.934964]  do_filp_open+0x1e8/0x450
[ 1952.934979]  ? __pfx_do_filp_open+0x10/0x10
[ 1952.934995]  ? __virt_addr_valid+0x2e8/0x5d0
[ 1952.935013]  ? find_held_lock+0x2b/0x80
[ 1952.935026]  ? alloc_fd+0x2c1/0x560
[ 1952.935042]  ? lock_release+0xc8/0x270
[ 1952.935060]  ? _raw_spin_unlock+0x1e/0x40
[ 1952.935077]  ? alloc_fd+0x2c1/0x560
[ 1952.935096]  do_sys_openat2+0x107/0x240
[ 1952.935107]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1952.935125]  __x64_sys_openat+0x142/0x200
[ 1952.935137]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1952.935155]  do_syscall_64+0xbf/0x420
[ 1952.935169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1952.935182] RIP: 0033:0x7ff2f9710a04
[ 1952.935193] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1952.935205] RSP: 002b:00007ff2f6cd2ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1952.935217] RAX: ffffffffffffffda RBX: 00007ff2f97a7970 RCX: 00007ff2f9710a04
[ 1952.935226] RDX: 0000000000000002 RSI: 00007ff2f6cd3000 RDI: 00000000ffffff9c
[ 1952.935234] RBP: 00007ff2f6cd3000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1952.935242] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1952.935249] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1952.935265]  </TASK>
[ 1952.954850] EXT4-fs (loop4): inodes count not valid: 1073741856 vs 32
[ 1952.960180] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1952.966355] EXT4-fs (loop4): inodes count not valid: 1073741856 vs 32
[ 1952.973001] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
21:04:06 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdf9, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:04:06 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 23)

21:04:06 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf056, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:06 executing program 7:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="20007000fddbdf25010000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040804)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xfffe}}, 0x14, &(0x7f0000000180)={&(0x7f0000000080)="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", 0xfb}, 0x1, 0x0, 0x0, 0x40000}, 0x4040)
bind$802154_raw(r2, &(0x7f0000000340)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14)

21:04:06 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5451, &(0x7f0000000140))

21:04:06 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x403b9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:06 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x700)

21:04:06 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000640002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1962.211926] set_capacity_and_notify: 16 callbacks suppressed
[ 1962.212537] loop5: detected capacity change from 0 to 513
[ 1962.231900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1962.251820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:04:06 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40410, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:06 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0xa00)

[ 1962.289431] loop3: detected capacity change from 0 to 120
[ 1962.293376] loop4: detected capacity change from 0 to 4132
[ 1962.294881] loop2: detected capacity change from 0 to 4132
[ 1962.302541] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1962.303648] loop1: detected capacity change from 0 to 264192
[ 1962.312056] EXT4-fs (loop4): inodes count not valid: 1677721632 vs 32
[ 1962.312268] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 1962.318831] loop3: detected capacity change from 0 to 120
[ 1962.320594] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1962.322216] EXT4-fs (loop1): group descriptors corrupted!
21:04:06 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x60000)

[ 1962.327360] loop5: detected capacity change from 0 to 514
[ 1962.332214] loop4: detected capacity change from 0 to 4132
[ 1962.332418] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks)
[ 1962.348752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1962.350709] loop1: detected capacity change from 0 to 264192
[ 1962.352631] EXT4-fs (loop4): inodes count not valid: 1677721632 vs 32
[ 1962.366924] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1962.369352] EXT4-fs (loop1): group descriptors corrupted!
[ 1962.400142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:04:20 executing program 7:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x40100)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x4b40, &(0x7f0000001440)={0x3ff, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
sendfile(r0, r1, &(0x7f0000000040)=0x8, 0x8000)

21:04:20 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x80000)

21:04:20 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5452, &(0x7f0000000140))

21:04:20 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200004800002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:04:20 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1265e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:20 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x404b9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:20 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdfd, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:04:20 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 24)

[ 1976.794071] loop5: detected capacity change from 0 to 514
[ 1976.802371] loop1: detected capacity change from 0 to 264192
[ 1976.812390] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1976.813308] EXT4-fs (loop1): group descriptors corrupted!
[ 1976.818638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1976.822544] loop1: detected capacity change from 0 to 264192
[ 1976.831574] loop4: detected capacity change from 0 to 4132
[ 1976.835591] EXT4-fs (loop4): inodes count not valid: 2147745824 vs 32
[ 1976.837760] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1976.839159] loop4: detected capacity change from 0 to 4132
[ 1976.839441] EXT4-fs (loop1): group descriptors corrupted!
[ 1976.841540] EXT4-fs (loop4): inodes count not valid: 2147745824 vs 32
21:04:20 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7d3212d5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c0, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_EXPECT_NAT={0x110, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000084}, 0x40880)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001020102000000300006802c5800018014000300fe80000000000000000000050000000000000000fe8000000000000000000000000000aa0000000000000000"], 0x44}}, 0x0)

[ 1976.860018] FAULT_INJECTION: forcing a failure.
[ 1976.860018] name failslab, interval 1, probability 0, space 0, times 0
[ 1976.860963] CPU: 1 UID: 0 PID: 13637 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1976.860981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1976.860989] Call Trace:
[ 1976.860994]  <TASK>
[ 1976.860999]  dump_stack_lvl+0xfa/0x120
[ 1976.861027]  should_fail_ex+0x4d7/0x5e0
[ 1976.861046]  ? __kernfs_new_node+0xd3/0x930
[ 1976.861060]  should_failslab+0xc2/0x120
[ 1976.861079]  kmem_cache_alloc_noprof+0x80/0x710
[ 1976.861093]  ? __pfx_avc_has_perm+0x10/0x10
[ 1976.861115]  ? __kernfs_new_node+0xd3/0x930
[ 1976.861127]  __kernfs_new_node+0xd3/0x930
[ 1976.861142]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1976.861157]  ? lock_acquire+0x15e/0x2d0
[ 1976.861174]  ? kernfs_root+0x23/0x2a0
[ 1976.861186]  ? find_held_lock+0x2b/0x80
[ 1976.861199]  ? kernfs_root+0xee/0x2a0
[ 1976.861210]  ? lock_release+0xc8/0x270
[ 1976.861225]  ? lock_is_held_type+0x9e/0x120
[ 1976.861247]  kernfs_new_node+0x13c/0x1e0
[ 1976.861264]  kernfs_create_dir_ns+0x4d/0x1a0
[ 1976.861280]  internal_create_group+0x440/0xeb0
[ 1976.861295]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1976.861318]  ? __pfx_internal_create_group+0x10/0x10
[ 1976.861331]  ? blk_validate_limits+0xc27/0x15c0
[ 1976.861352]  ? lock_is_held_type+0x9e/0x120
[ 1976.861372]  loop_configure+0xc46/0x15a0
[ 1976.861404]  ? __pfx_loop_configure+0x10/0x10
[ 1976.861430]  ? avc_has_extended_perms+0x107/0xf20
[ 1976.861446]  ? find_held_lock+0x2b/0x80
[ 1976.861458]  ? avc_has_extended_perms+0x23b/0xf20
[ 1976.861475]  ? lock_release+0xc8/0x270
[ 1976.861491]  lo_ioctl+0x66d/0x1ca0
[ 1976.861512]  ? __pfx_lo_ioctl+0x10/0x10
[ 1976.861529]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1976.861550]  ? lock_acquire+0x15e/0x2d0
[ 1976.861567]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1976.861587]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1976.861608]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1976.861624]  ? lock_release+0xc8/0x270
[ 1976.861641]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1976.861677]  ? check_irq_usage+0x210/0xb40
[ 1976.861692]  ? __fget_files+0x34/0x3b0
[ 1976.861710]  ? find_held_lock+0x2b/0x80
[ 1976.861721]  ? __fget_files+0x203/0x3b0
[ 1976.861737]  ? __pfx_lo_ioctl+0x10/0x10
[ 1976.861755]  blkdev_ioctl+0x365/0x6d0
[ 1976.861777]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1976.861795]  ? selinux_file_ioctl+0xb9/0x280
[ 1976.861811]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1976.861830]  __x64_sys_ioctl+0x18f/0x210
[ 1976.861846]  do_syscall_64+0xbf/0x420
[ 1976.861859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1976.861872] RIP: 0033:0x7ff2f975d8d7
[ 1976.861883] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1976.861895] RSP: 002b:00007ff2f6cd2f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1976.861907] RAX: ffffffffffffffda RBX: 00007ff2f97a7970 RCX: 00007ff2f975d8d7
[ 1976.861916] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1976.861924] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1976.861932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1976.861944] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1976.861959]  </TASK>
[ 1976.886926] loop2: detected capacity change from 0 to 4132
[ 1976.889413] loop3: detected capacity change from 0 to 147
[ 1976.892576] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 1976.895256] EXT4-fs (loop2): inodes count not valid: 5 vs 32
21:04:20 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200003e80002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1976.909232] loop4: detected capacity change from 0 to 4132
[ 1976.915095] EXT4-fs (loop4): inodes count not valid: 3892510752 vs 32
[ 1976.916398] loop3: detected capacity change from 0 to 147
[ 1976.921897] loop4: detected capacity change from 0 to 4132
[ 1976.922691] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 1976.925804] EXT4-fs (loop4): inodes count not valid: 3892510752 vs 32
21:04:21 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff7f, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:04:21 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x12670, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1976.985359] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1976.986195] EXT4-fs (loop1): group descriptors corrupted!
[ 1976.997528] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1976.998421] EXT4-fs (loop1): group descriptors corrupted!
[ 1977.002857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1977.008634] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.7'.
[ 1977.047475] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.7'.
[ 1977.066513] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 1977.080548] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (18 blocks)
21:04:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x129da, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:29 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r2, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
pread64(r2, &(0x7f0000000300)=""/160, 0xa0, 0x4)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x33, 0x4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth1_virt_wifi\x00', {0x1}, 0x8})
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0xfffffffffffffea4)

21:04:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 25)

21:04:29 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000fdef0002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:04:29 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x545d, &(0x7f0000000140))

21:04:29 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:04:29 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x100000)

[ 1985.209320] set_capacity_and_notify: 4 callbacks suppressed
[ 1985.209336] loop4: detected capacity change from 0 to 4132
[ 1985.210562] loop1: detected capacity change from 0 to 264192
[ 1985.214714] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1985.214784] loop2: detected capacity change from 0 to 4132
[ 1985.215553] EXT4-fs (loop1): group descriptors corrupted!
[ 1985.216338] EXT4-fs (loop4): inodes count not valid: 4026335264 vs 32
[ 1985.228029] loop5: detected capacity change from 0 to 514
[ 1985.228267] loop1: detected capacity change from 0 to 264192
[ 1985.230447] loop4: detected capacity change from 0 to 4132
[ 1985.234487] loop3: detected capacity change from 0 to 148
[ 1985.235637] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1985.236988] EXT4-fs (loop1): group descriptors corrupted!
[ 1985.241918] EXT4-fs (loop4): inodes count not valid: 4026335264 vs 32
[ 1985.258072] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 1985.258476] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 1985.271674] loop3: detected capacity change from 0 to 148
[ 1985.285565] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (18 blocks)
21:04:29 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000f00002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:04:29 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff97, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1985.318613] loop4: detected capacity change from 0 to 4132
[ 1985.321292] EXT4-fs (loop4): inodes count not valid: 4026531872 vs 32
21:04:29 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x1000000)

[ 1985.324324] loop4: detected capacity change from 0 to 4132
[ 1985.326691] EXT4-fs (loop4): inodes count not valid: 4026531872 vs 32
[ 1985.336772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:04:29 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000f50002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1985.376660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:04:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x405b9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 26)

[ 1985.404228] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1985.405140] EXT4-fs (loop1): group descriptors corrupted!
21:04:29 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5460, &(0x7f0000000140))

[ 1985.418795] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1985.419712] EXT4-fs (loop1): group descriptors corrupted!
21:04:29 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0x7ffff000}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, 0x0, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGLCKTRMIOS(r2, 0x4b40, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, "58cc2e9abcd685a0f28c8b05fdf1fd821eb0c1"})
pread64(r2, &(0x7f0000000300)=""/160, 0xa0, 0x4)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x33, 0x4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth1_virt_wifi\x00', {0x1}, 0x8})
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0xfffffffffffffea4)

[ 1985.455775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1985.459079] EXT4-fs (loop4): inodes count not valid: 4110417952 vs 32
[ 1985.474739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:04:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x129e0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:29 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:04:29 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x2000000)

[ 1985.502351] EXT4-fs (loop4): inodes count not valid: 4110417952 vs 32
[ 1985.538398] FAULT_INJECTION: forcing a failure.
[ 1985.538398] name failslab, interval 1, probability 0, space 0, times 0
[ 1985.540101] CPU: 0 UID: 0 PID: 13698 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1985.540132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1985.540146] Call Trace:
[ 1985.540154]  <TASK>
[ 1985.540163]  dump_stack_lvl+0xfa/0x120
[ 1985.540207]  should_fail_ex+0x4d7/0x5e0
[ 1985.540237]  ? __kernfs_new_node+0xd3/0x930
[ 1985.540261]  should_failslab+0xc2/0x120
[ 1985.540294]  kmem_cache_alloc_noprof+0x80/0x710
[ 1985.540325]  ? __kernfs_new_node+0xd3/0x930
[ 1985.540358]  __kernfs_new_node+0xd3/0x930
[ 1985.540384]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1985.540412]  ? lock_acquire+0x15e/0x2d0
[ 1985.540441]  ? kernfs_root+0x23/0x2a0
[ 1985.540464]  ? find_held_lock+0x2b/0x80
[ 1985.540486]  ? kernfs_root+0xee/0x2a0
[ 1985.540508]  ? lock_release+0xc8/0x270
[ 1985.540533]  ? lock_is_held_type+0x9e/0x120
[ 1985.540573]  kernfs_new_node+0x13c/0x1e0
[ 1985.540604]  __kernfs_create_file+0x55/0x360
[ 1985.540640]  sysfs_add_file_mode_ns+0x21c/0x430
[ 1985.540665]  ? __pfx_dev_attr_store+0x10/0x10
[ 1985.540706]  internal_create_group+0x662/0xeb0
[ 1985.540738]  ? __pfx_internal_create_group+0x10/0x10
[ 1985.540763]  ? blk_validate_limits+0xc27/0x15c0
[ 1985.540801]  ? lock_is_held_type+0x9e/0x120
[ 1985.540836]  loop_configure+0xc46/0x15a0
[ 1985.540893]  ? __pfx_loop_configure+0x10/0x10
[ 1985.540947]  ? avc_has_extended_perms+0x107/0xf20
[ 1985.540981]  ? find_held_lock+0x2b/0x80
[ 1985.541002]  ? avc_has_extended_perms+0x23b/0xf20
[ 1985.541034]  ? lock_release+0xc8/0x270
[ 1985.541064]  lo_ioctl+0x66d/0x1ca0
[ 1985.541102]  ? __pfx_lo_ioctl+0x10/0x10
[ 1985.541133]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1985.541172]  ? lock_acquire+0x15e/0x2d0
[ 1985.541204]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1985.541231]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1985.541266]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1985.541295]  ? lock_release+0xc8/0x270
[ 1985.541327]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1985.541391]  ? check_irq_usage+0x210/0xb40
[ 1985.541417]  ? __fget_files+0x34/0x3b0
[ 1985.541447]  ? find_held_lock+0x2b/0x80
[ 1985.541468]  ? __fget_files+0x203/0x3b0
[ 1985.541498]  ? __pfx_lo_ioctl+0x10/0x10
[ 1985.541530]  blkdev_ioctl+0x365/0x6d0
[ 1985.541564]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1985.541598]  ? selinux_file_ioctl+0xb9/0x280
[ 1985.541627]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1985.541662]  __x64_sys_ioctl+0x18f/0x210
[ 1985.541690]  do_syscall_64+0xbf/0x420
[ 1985.541714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1985.541737] RIP: 0033:0x7ff2f975d8d7
[ 1985.541755] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1985.541776] RSP: 002b:00007ff2f6cd2f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1985.541798] RAX: ffffffffffffffda RBX: 00007ff2f97a7970 RCX: 00007ff2f975d8d7
[ 1985.541814] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1985.541827] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1985.541841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1985.541854] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1985.541882]  </TASK>
[ 1985.543287] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1985.569070] EXT4-fs (loop1): group descriptors corrupted!
[ 1985.571011] EXT4-fs (loop2): inodes count not valid: 5 vs 32
21:04:29 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000effd0002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1985.578873] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 1985.592454] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 1985.608299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
21:04:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x12dff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x406b9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1985.647825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1985.652011] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1985.652834] EXT4-fs (loop1): group descriptors corrupted!
[ 1985.694320] EXT4-fs (loop4): inodes count not valid: 4260298784 vs 32
[ 1985.712689] EXT4-fs (loop4): inodes count not valid: 4260298784 vs 32
[ 1985.721066] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 1985.734959] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 1985.772548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1985.801731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:04:38 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 27)

21:04:38 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x3000000)

21:04:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x12e02, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:38 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffb, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:04:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000fffe0002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:04:38 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:38 executing program 7:
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000080))
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r1 = eventfd2(0x0, 0x0)
io_setup(0x47, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x8)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFSLABEL(r4, 0x8008662c, &(0x7f0000000200)="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")
r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFSLABEL(r5, 0x8008662c, &(0x7f0000000200)="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")
r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFSLABEL(r6, 0x8008662c, &(0x7f0000000200)="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")
[ 1994.861890] set_capacity_and_notify: 16 callbacks suppressed
[ 1994.861905] loop2: detected capacity change from 0 to 4132
[ 1994.871681] EXT4-fs (loop2): inodes count not valid: 5 vs 32
io_submit(r2, 0x4, &(0x7f00000023c0)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000100)="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", 0x1000, 0x53609fac, 0x0, 0x0, r1}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x7, 0xff94, r1, &(0x7f0000001140)="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", 0x1000, 0x4, 0x0, 0xbc6d1a0ca30a334c, r4}, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x2, 0x1f, r0, &(0x7f0000002240)="bb856d4cf9e3058b6691720f6c098c02b3a752047c598a7953a3130a248a1384cb17e6cbd83ee2c0808333a4cf972a1a00defc4dccca41da7b93beecc7da6d9fd7c08397b94b0e513a7eff289c0ca6c2d2d598b5dde37bfc9d55e910cec23589faf70c646dc6217bc72f7df1ed7f0b7781c39152d1ff75ab2612fc4f06ac9070667a1f7f5435cbd6bb3af94b283d8842f39d7c90ba2c1044a75acff8d57bacedf253760f1bd681a313a4a09a41827081906e6d637f40f5370dbc97b3a645b777454e1c62f44c06d5b4192e9b2311c7bde147a621e6cebe999969cda352b6f56e7eac19ab", 0xe4, 0x3, 0x0, 0x1, r5}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000002340)="6a41271f4d98192a7931782ec50dbd389e75d96452897ed26916b0b51c7250496e325cae68b76c972dc8f6cf0c90317a28c51903b9ce1806a031d98773735e77e90b0d645899", 0x46, 0x0, 0x0, 0x1, r6}])
r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFSLABEL(r7, 0x8008662c, &(0x7f0000000200)="db4a991ba205010cbf9f556f65e9c529c6affd76c7a76f638cea9ef49be20be1f0cc2c3d707c79b64c0fd413f623008d8f4f95ddd52e3d3f12cd2ceb143f160e0be60f88c838eaa7103573ec0a3aebdbecd0594480adce693b2b4b58a291f6991d6d70dea1e825515f1df31be653690081ff19fcbc9ff4bfb4cffd1a87bb6d042cc0d4484c6b028308c4f653b11a79cfe2b7c823044051a753effa6798c346714014ca6a6fde7e0a070b0f59805487db3afb7dadb55ab763c1825638415dbef3613d155399bcf3671d22832d96f65ade339ba39a379cd24eeedb24cfd7b16e3397cb3415aeb2c89964b9c36f2d2fbc97b2af2ab27912479ee5fb7d78dab9728d")
io_submit(r2, 0x5, &(0x7f0000003b00)=[&(0x7f0000003400)={0x0, 0x0, 0x0, 0x7, 0xbeb, r0, &(0x7f0000002400)="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", 0x1000, 0x1ff, 0x0, 0x3, r4}, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x7, 0x7a7, r1, &(0x7f0000003440)="b249e400c32a786c51b8bd0a611267f0d4aa0bed5dc94dc44e40dcd7884a2ce9171e423582aacffa6a22c0cf47a7a50f3beec4dc36bd28b7bfd1f733240062113db727bbef8cc0938a6aa4f7f3731511463b59c86e20942560b58885f94498b1ce78a1ba64970fdcf5960b7ef42f4d94df58e51be0da4021a3f88eba507c409f6a880ffcd04f79a0d3aeaa1a8039bbd2cffb4a5d7c33c5882067433d55918a149804f938c923e7b06c1542a656e0052160209262f1b21f209c8c8edc31cc9cd8bdb259bf2f4085b58d04a33ccd8a1785777aea9898e4b1cc9372f489f2df2eae9a7b7da12dfa37849006c858", 0xec, 0x7, 0x0, 0x2, r6}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x6, 0x400, r4, &(0x7f0000003580)="5edf47c5c67cda54a7218bd04992d5dd4d2602b3e4de21334d9e769c51f21d7ccdb11ffb6ac39940763a02b0623f2a1bd3e3912b7128de64f0b77261d6b11f559b791b2320e4fdec310c08b6c14848a972c7fdf961b63ef62a0d73969ab5fdb7fe183732696b1253", 0x68, 0x1, 0x0, 0x2}, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f0000003640)="70ac736a6efdb9c12c0acbed68b3880f313a933376d35a1526a0d093b3784d35e1b991cbba5b4d8477674daacf28e8d3", 0x30, 0x727d}, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000039c0)="40ebd2468f086726d576a6c98b67b88b063dd372858d12c4f62a54cac5cbf65279715e81f21ab2ecdb44772afd460fd380b61c06ee728a577b6d21eccf8e25b46113a0e98538be6a6814bca5410630c4329eb7efd856b196ee2f345a94a20fe9be8eb546027b11545016665f65895b2789f1f827ed9c484dc758a2ffa6fffdf1b66b3c2e7d9c9a5452493ccafed0b8f8e5bede238adb071657b9f369d98d6624d7dc4cb77805df50a14d8539e9925b2c6f6447f2ab1ee52cb7012e4f0d831c395e40d34bd481a7c056", 0xc9, 0x1ff, 0x0, 0x1, r7}])
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)

21:04:38 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5600, &(0x7f0000000140))

21:04:39 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x4000000)

[ 1994.890041] loop4: detected capacity change from 0 to 4132
[ 1994.902308] EXT4-fs (loop4): inodes count not valid: 4278124576 vs 32
21:04:39 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 28)

[ 1994.917284] loop4: detected capacity change from 0 to 4132
[ 1994.927202] EXT4-fs (loop4): inodes count not valid: 4278124576 vs 32
[ 1994.927823] loop5: detected capacity change from 0 to 515
[ 1994.933909] loop1: detected capacity change from 0 to 264192
[ 1994.935565] loop3: detected capacity change from 0 to 151
[ 1994.954378] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 1994.957020] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1994.958613] EXT4-fs (loop1): group descriptors corrupted!
21:04:39 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200001ff0002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1994.981121] FAULT_INJECTION: forcing a failure.
[ 1994.981121] name failslab, interval 1, probability 0, space 0, times 0
[ 1994.982058] CPU: 0 UID: 0 PID: 13751 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 1994.982076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
21:04:39 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5601, &(0x7f0000000140))

[ 1994.982083] Call Trace:
[ 1994.982089]  <TASK>
[ 1994.982095]  dump_stack_lvl+0xfa/0x120
[ 1994.982122]  should_fail_ex+0x4d7/0x5e0
[ 1994.982140]  ? __kernfs_new_node+0xd3/0x930
[ 1994.982154]  should_failslab+0xc2/0x120
[ 1994.982172]  kmem_cache_alloc_noprof+0x80/0x710
[ 1994.982190]  ? __kernfs_new_node+0xd3/0x930
[ 1994.982202]  __kernfs_new_node+0xd3/0x930
[ 1994.982217]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1994.982232]  ? lock_acquire+0x15e/0x2d0
[ 1994.982248]  ? kernfs_root+0x23/0x2a0
[ 1994.982261]  ? find_held_lock+0x2b/0x80
[ 1994.982273]  ? kernfs_root+0xee/0x2a0
[ 1994.982286]  ? lock_release+0xc8/0x270
[ 1994.982300]  ? lock_is_held_type+0x9e/0x120
[ 1994.982321]  kernfs_new_node+0x13c/0x1e0
[ 1994.982338]  __kernfs_create_file+0x55/0x360
[ 1994.982358]  sysfs_add_file_mode_ns+0x21c/0x430
[ 1994.982372]  ? __pfx_dev_attr_store+0x10/0x10
[ 1994.982394]  internal_create_group+0x662/0xeb0
[ 1994.982412]  ? __pfx_internal_create_group+0x10/0x10
[ 1994.982425]  ? blk_validate_limits+0xc27/0x15c0
[ 1994.982447]  ? lock_is_held_type+0x9e/0x120
[ 1994.982466]  loop_configure+0xc46/0x15a0
[ 1994.982498]  ? __pfx_loop_configure+0x10/0x10
[ 1994.982524]  ? avc_has_extended_perms+0x107/0xf20
[ 1994.982542]  ? find_held_lock+0x2b/0x80
[ 1994.982553]  ? avc_has_extended_perms+0x23b/0xf20
[ 1994.982571]  ? lock_release+0xc8/0x270
[ 1994.982587]  lo_ioctl+0x66d/0x1ca0
[ 1994.982607]  ? __pfx_lo_ioctl+0x10/0x10
[ 1994.982624]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1994.982645]  ? lock_acquire+0x15e/0x2d0
[ 1994.982660]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1994.982675]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1994.982695]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1994.982711]  ? lock_release+0xc8/0x270
[ 1994.982728]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1994.982763]  ? check_irq_usage+0x210/0xb40
[ 1994.982777]  ? __fget_files+0x34/0x3b0
[ 1994.982793]  ? find_held_lock+0x2b/0x80
[ 1994.982804]  ? __fget_files+0x203/0x3b0
[ 1994.982820]  ? __pfx_lo_ioctl+0x10/0x10
[ 1994.982837]  blkdev_ioctl+0x365/0x6d0
[ 1994.982858]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1994.982876]  ? selinux_file_ioctl+0xb9/0x280
[ 1994.982894]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1994.982912]  __x64_sys_ioctl+0x18f/0x210
[ 1994.982928]  do_syscall_64+0xbf/0x420
[ 1994.982945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1994.982958] RIP: 0033:0x7ff2f975d8d7
[ 1994.982969] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1994.982981] RSP: 002b:00007ff2f6cd2f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1994.982994] RAX: ffffffffffffffda RBX: 00007ff2f97a7970 RCX: 00007ff2f975d8d7
[ 1994.983003] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 1994.983011] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 1994.983019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1994.983026] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 1994.983042]  </TASK>
[ 1995.012357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1995.013469] loop3: detected capacity change from 0 to 151
[ 1995.020481] loop1: detected capacity change from 0 to 264192
[ 1995.036805] loop4: detected capacity change from 0 to 4132
[ 1995.040918] EXT4-fs (loop4): inodes count not valid: 4278255648 vs 32
[ 1995.046156] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 1995.048904] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1995.050099] EXT4-fs (loop1): group descriptors corrupted!
21:04:39 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x5000000)

[ 1995.073210] loop4: detected capacity change from 0 to 4132
[ 1995.082894] EXT4-fs (loop4): inodes count not valid: 4278255648 vs 32
21:04:39 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x407b9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

[ 1995.102532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
21:04:39 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000feff0002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 1995.184123] EXT4-fs (loop2): inodes count not valid: 5 vs 32
21:04:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x13100, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:39 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5602, &(0x7f0000000140))

21:04:39 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffd, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:04:39 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 29)

[ 1995.290762] EXT4-fs (loop4): inodes count not valid: 4294836256 vs 32
[ 1995.310265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1995.325588] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (19 blocks)
[ 1995.341205] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (19 blocks)
[ 1995.344896] EXT4-fs (loop4): inodes count not valid: 4294836256 vs 32
[ 1995.366592] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1995.388906] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1995.390458] EXT4-fs (loop1): group descriptors corrupted!
[ 1995.434041] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 1995.443239] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 1995.444773] EXT4-fs (loop1): group descriptors corrupted!
21:04:48 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="050000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00)) (fail_nth: 30)

21:04:48 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffe, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000003", 0x5, 0x7fe}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

21:04:48 executing program 7:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00')
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xb701)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x6002, 0x21}, 0x18)
r1 = mq_open(&(0x7f0000000140)='^\x00', 0x1, 0x12a, &(0x7f0000000180)={0xffffffffffffff76, 0x80000000, 0x7fff, 0x5})
finit_module(r1, &(0x7f00000000c0)='/\'(e4):$\x00_Db`\xad(@\xea\xca\xc45\xb2\xf1\x06\xca\x89d', 0x3)

21:04:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x13120, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:48 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x6000000)

21:04:48 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x408b9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[])

21:04:48 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5603, &(0x7f0000000140))

21:04:48 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000003000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x4000000000002400}], 0x0, &(0x7f0000013e00))

[ 2004.091134] set_capacity_and_notify: 9 callbacks suppressed
[ 2004.091149] loop3: detected capacity change from 0 to 152
[ 2004.098475] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (19 blocks)
[ 2004.102127] loop4: detected capacity change from 0 to 4132
[ 2004.105827] loop3: detected capacity change from 0 to 152
[ 2004.122365] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (19 blocks)
21:04:48 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/220, 0xdc}, {0x0}], 0x2, 0x600, 0x7000000)

[ 2004.132445] loop5: detected capacity change from 0 to 516
[ 2004.145407] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 2004.146870] EXT4-fs (loop4): group descriptors corrupted!
[ 2004.154313] loop1: detected capacity change from 0 to 264192
[ 2004.162204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2004.165702] FAULT_INJECTION: forcing a failure.
[ 2004.165702] name failslab, interval 1, probability 0, space 0, times 0
[ 2004.167508] CPU: 0 UID: 0 PID: 13801 Comm: syz-executor.2 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) 
[ 2004.167540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2004.167554] Call Trace:
[ 2004.167562]  <TASK>
[ 2004.167571]  dump_stack_lvl+0xfa/0x120
[ 2004.167615]  should_fail_ex+0x4d7/0x5e0
[ 2004.167646]  ? __kernfs_new_node+0xd3/0x930
[ 2004.167671]  should_failslab+0xc2/0x120
[ 2004.167705]  kmem_cache_alloc_noprof+0x80/0x710
[ 2004.167740]  ? __kernfs_new_node+0xd3/0x930
[ 2004.167764]  __kernfs_new_node+0xd3/0x930
[ 2004.167792]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2004.167822]  ? lock_acquire+0x15e/0x2d0
[ 2004.167852]  ? kernfs_root+0x23/0x2a0
[ 2004.167876]  ? find_held_lock+0x2b/0x80
[ 2004.167899]  ? kernfs_root+0xee/0x2a0
[ 2004.167922]  ? lock_release+0xc8/0x270
[ 2004.167957]  ? lock_is_held_type+0x9e/0x120
[ 2004.168000]  kernfs_new_node+0x13c/0x1e0
[ 2004.168033]  __kernfs_create_file+0x55/0x360
[ 2004.168070]  sysfs_add_file_mode_ns+0x21c/0x430
[ 2004.168096]  ? __pfx_dev_attr_store+0x10/0x10
[ 2004.168137]  internal_create_group+0x662/0xeb0
[ 2004.168172]  ? __pfx_internal_create_group+0x10/0x10
[ 2004.168198]  ? blk_validate_limits+0xc27/0x15c0
[ 2004.168238]  ? lock_is_held_type+0x9e/0x120
[ 2004.168276]  loop_configure+0xc46/0x15a0
[ 2004.168335]  ? __pfx_loop_configure+0x10/0x10
[ 2004.168386]  ? avc_has_extended_perms+0x107/0xf20
[ 2004.168422]  ? find_held_lock+0x2b/0x80
[ 2004.168445]  ? avc_has_extended_perms+0x23b/0xf20
[ 2004.168479]  ? lock_release+0xc8/0x270
[ 2004.168590]  lo_ioctl+0x66d/0x1ca0
[ 2004.168642]  ? __pfx_lo_ioctl+0x10/0x10
[ 2004.168677]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 2004.168719]  ? lock_acquire+0x15e/0x2d0
[ 2004.168749]  ? __virt_addr_valid+0x1c6/0x5d0
[ 2004.168780]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2004.168816]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2004.168850]  ? lock_release+0xc8/0x270
[ 2004.168884]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2004.168953]  ? check_irq_usage+0x210/0xb40
[ 2004.168982]  ? __fget_files+0x34/0x3b0
[ 2004.169012]  ? find_held_lock+0x2b/0x80
[ 2004.169035]  ? __fget_files+0x203/0x3b0
[ 2004.169067]  ? __pfx_lo_ioctl+0x10/0x10
[ 2004.169101]  blkdev_ioctl+0x365/0x6d0
[ 2004.169138]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 2004.169175]  ? selinux_file_ioctl+0xb9/0x280
[ 2004.169205]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 2004.169243]  __x64_sys_ioctl+0x18f/0x210
[ 2004.169271]  do_syscall_64+0xbf/0x420
[ 2004.169297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2004.169321] RIP: 0033:0x7ff2f975d8d7
[ 2004.169340] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2004.169364] RSP: 002b:00007ff2f6cd2f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2004.169387] RAX: ffffffffffffffda RBX: 00007ff2f97a7970 RCX: 00007ff2f975d8d7
[ 2004.169403] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 2004.169417] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 2004.169431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2004.169445] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 2004.169475]  </TASK>
[ 2004.216712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2004.226836] 
[ 2004.227150] ================================================
[ 2004.228029] WARNING: lock held when returning to user space!
[ 2004.228956] 6.18.0-rc7-next-20251128 #1 Not tainted
[ 2004.229708] ------------------------------------------------
[ 2004.230570] syz-executor.7/13800 is leaving the kernel with locks still held!
[ 2004.231651] 1 lock held by syz-executor.7/13800:
[ 2004.232371]  #0: ffff88800b351c88 (&sb->s_type->i_mutex_key#28/1){+.+.}-{4:4}, at: start_creating_noperm+0x84/0xd0
[ 2004.243292] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 2004.245022] EXT4-fs (loop1): group descriptors corrupted!
[ 2004.263244] loop2: detected capacity change from 0 to 4132
[ 2004.265480] loop4: detected capacity change from 0 to 4132
[ 2004.270424] EXT4-fs (loop2): inodes count not valid: 5 vs 32
[ 2004.275330] loop1: detected capacity change from 0 to 264192
[ 2004.283743] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 2004.285231] EXT4-fs (loop4): group descriptors corrupted!
[ 2004.287225] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 196608)!
[ 2004.288204] EXT4-fs (loop1): group descriptors corrupted!

VM DIAGNOSIS:
21:04:48  Registers:
info registers vcpu 0
RAX=1ffffd40001bdf4c RBX=ffff88804ce67d68 RCX=ffffffff818fd7d4 RDX=ffff88801bdc5340
RSI=0000000000000008 RDI=ffffea0000defa40 RBP=ffffea0000defa40 RSP=ffff88804ce67b58
R8 =0000000000000000 R9 =fffff940001bdf48 R10=0000000000000000 R11=0000000000000000
R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000003 R15=ffff888019993460
RIP=ffffffff81b37284 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555593c87400 00000000 00000000
GS =0000 ffff8880e5368000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d623000 CR3=0000000020800000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000ff00000000000000 XMM01=00000000000000000100000000000000
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f82161d27c800007f82161d27c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffffffff885bf4a8 RCX=ffffffff8152d2c3 RDX=0000000000000001
RSI=0000000000000004 RDI=ffff88806cf08cd0 RBP=1ffff1100d9e1196 RSP=ffff88806cf08ca8
R8 =0000000000000001 R9 =ffffed100d9e119a R10=0000000000000003 R11=ffff88806cf08ff8
R12=ffffffff885bf4b0 R13=ffffffff885bf4b8 R14=000001d2a02c0780 R15=0000000000000001
RIP=ffffffff8152d2d4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555584dd5400 00000000 00000000
GS =0000 ffff8880e5468000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe3a43bff8 CR3=000000000db20000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=0000000000000000394eb8883082a288
XMM02=00000000000000000126f7cd0c59844a XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000