0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="92cfeafec21c7951e806359e1b4fee7d35aaca2df4cfb9e4c8202a6c840db31f4165ab2c332465ea2e85a7bcd1248f1dac7ee1f3d24aa1c529a37c6263c0d0f255f67f358974877f4d172952277f3deaf6c78282e0b6bff4d8f44110515f8f3c61086bd45842eed0fd26ba240b8f09586c4d6908e7a6cf80005e43203a9d031d249db526f711186d1d5a54a9232e7c1c0adb95691c46bdc18af22ceeba1ebc9a14f1c377ac0be73e6dd8516233532c86fd6dca6204c8315673478a2360", 0xbd, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 03:49:12 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(0x0, 0x0) [ 452.349283] loop4: detected capacity change from 0 to 4 [ 452.366849] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 452.366865] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 03:49:12 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 452.376095] No source specified [ 452.426619] 9pnet_fd: Insufficient options for proto=fd 03:49:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 03:49:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 18) 03:49:12 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800) recvmmsg$unix(r2, &(0x7f0000000140), 0x0, 0x10003, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/34, 0x22) 03:49:12 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a00602003da1cc707493faefe1f4c3b9005000000000006"], 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa7}, "4f24446f97d8ed0976c5abbae761ef7db8c65f6f0c41cbcfb6c5fbc80a93fc3de6c56c4446ffa497a452d0238d8147c5754d69b7eaaf31699a30c9c82ccd2a1a5d65200fb49a474132002ab0742a9b50ab271b1cae75c9a27280a00c473860e859ef7a9be1448e6c4cc66e4341ab29d3152465dd79079b0526dd9a2b175c384817c6da2ecbff5208320810e86fd40da58cad6c87486b51dc8f59f67aeb3537cf8d954df638a36e"}, 0xab) 03:49:12 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) [ 452.569745] loop4: detected capacity change from 0 to 4 [ 452.580813] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 452.581644] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 03:49:12 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x7) 03:49:12 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r2, &(0x7f0000000240)=""/34, 0x22) [ 452.639990] FAULT_INJECTION: forcing a failure. [ 452.639990] name failslab, interval 1, probability 0, space 0, times 0 [ 452.642223] CPU: 0 UID: 0 PID: 5516 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 452.642255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 452.642268] Call Trace: [ 452.642276] [ 452.642285] dump_stack_lvl+0xfa/0x120 [ 452.642323] should_fail_ex+0x4d7/0x5e0 [ 452.642364] ? __es_insert_extent+0xed2/0x1370 [ 452.642387] should_failslab+0xc2/0x120 [ 452.642420] kmem_cache_alloc_noprof+0x72/0x680 [ 452.642454] ? __es_insert_extent+0xed2/0x1370 [ 452.642476] __es_insert_extent+0xed2/0x1370 [ 452.642503] ? __pfx_do_raw_write_lock+0x10/0x10 [ 452.642547] ext4_es_insert_extent+0x4d0/0x1100 [ 452.642584] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 452.642617] ? lock_acquire+0x15e/0x2f0 [ 452.642645] ? find_held_lock+0x2b/0x80 [ 452.642686] ? ext4_es_find_extent_range+0x1cf/0x510 [ 452.642712] ? lock_release+0xc8/0x290 [ 452.642740] ? do_raw_read_unlock+0x44/0xe0 [ 452.642779] ext4_ext_map_blocks+0x178d/0x5f70 [ 452.642810] ? lock_acquire+0x15e/0x2f0 [ 452.642835] ? fs_reclaim_acquire+0xae/0x150 [ 452.642866] ? lock_is_held_type+0x9e/0x120 [ 452.642902] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 452.642923] ? bdev_getblk+0x84/0xf0 [ 452.642956] ? look_up_lock_class+0x56/0x150 [ 452.642983] ? register_lock_class+0x41/0x560 [ 452.643012] ? register_lock_class+0x41/0x560 [ 452.643043] ? __lock_acquire+0xc65/0x1b70 [ 452.643082] ? lock_acquire+0x15e/0x2f0 [ 452.643115] ? ext4_map_blocks+0x49f/0x14a0 [ 452.643150] ext4_map_query_blocks+0x117/0x890 [ 452.643178] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 452.643202] ? __pfx_down_read+0x10/0x10 [ 452.643232] ? ext4_es_lookup_extent+0xc8/0xb30 [ 452.643266] ext4_map_blocks+0x4b3/0x14a0 [ 452.643301] ? __pfx_ext4_map_blocks+0x10/0x10 [ 452.643328] ? __pfx_ext4_initxattrs+0x10/0x10 [ 452.643351] ? __pfx_security_inode_init_security+0x10/0x10 [ 452.643389] ? crc32c+0x1ae/0x350 [ 452.643421] ? __brelse+0x7f/0xa0 [ 452.643444] ? __ext4_new_inode+0x116/0x4d70 [ 452.643480] ext4_append+0x1b6/0x530 [ 452.643515] ? __pfx_ext4_append+0x10/0x10 [ 452.643551] ? __pfx___ext4_new_inode+0x10/0x10 [ 452.643592] ext4_init_new_dir+0x13c/0x240 [ 452.643614] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 452.643646] ext4_mkdir+0x3c5/0xb30 [ 452.643674] ? __pfx_ext4_mkdir+0x10/0x10 [ 452.643695] ? security_inode_permission+0x72/0xe0 [ 452.643727] vfs_mkdir+0x59a/0x8d0 [ 452.643755] do_mkdirat+0x19f/0x3d0 [ 452.643787] ? __pfx_do_mkdirat+0x10/0x10 [ 452.643826] __x64_sys_mkdir+0xf3/0x140 [ 452.643857] do_syscall_64+0xbf/0x390 [ 452.643889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.643912] RIP: 0033:0x7fc4b82cdc27 [ 452.643930] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 452.643951] RSP: 002b:00007fc4b5843fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 452.643972] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b82cdc27 [ 452.643987] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000280 [ 452.644001] RBP: 00007fc4b5844040 R08: 0000000000000000 R09: 0000000000000000 [ 452.644015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 452.644028] R13: 0000000020000280 R14: 00007fc4b5844000 R15: 0000000020000580 [ 452.644060] [ 452.705028] No source specified 03:49:23 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x100, 0xffff}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:49:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 03:49:23 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:49:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000240)={{}, {0x2}, 0x20, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="2b318b6a5d59b5c83ff1686aa6eddeb2b4df568cb70de4ff795e4ee2679e95caa21f2b54d567", 0x26, 0x0, &(0x7f0000000140)={0x2, 0x87, {0x1, 0xc, 0x25, "1453f1cc8234b19c842a123fc580ac5d114b0184a9484bb3d1838157acc6ecdb91a1c73fab", 0x55, "b91179cf8ca278c98466d3b39375d64a17edc0daaff4b015c3cab36188803551babdc65130ec82b68eb8a3328d25ac1cc0ce715696f726fa52a2fdeab2322e137e7176dff44eb921cb6e40f00c86acc0245fafb5af"}, 0x55, "ce2dc99bf25d2f734bb4f306581d8d9a2de4d043c4bf2de92acafcd6a48e34950d5f580488b634f0c44f0287367f0cc57c0789cd71152415092f7fc7ca86e76db4df4a848309a28c693c6efde45e98ab49a5bb601d"}, 0xe8}) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execve(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) 03:49:23 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r2, &(0x7f0000000240)=""/34, 0x22) 03:49:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 19) 03:49:23 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 03:49:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x121000, 0x6) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x28}}, 0x0) [ 462.793483] No source specified 03:49:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 20) [ 462.848764] 9pnet_fd: Insufficient options for proto=fd [ 462.859765] loop4: detected capacity change from 0 to 4 [ 462.862634] 9pnet_fd: Insufficient options for proto=fd [ 462.874387] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 462.875012] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 462.878882] FAULT_INJECTION: forcing a failure. [ 462.878882] name failslab, interval 1, probability 0, space 0, times 0 [ 462.880239] CPU: 0 UID: 0 PID: 5551 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 462.880257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 462.880264] Call Trace: [ 462.880269] [ 462.880274] dump_stack_lvl+0xfa/0x120 [ 462.880305] should_fail_ex+0x4d7/0x5e0 [ 462.880329] should_failslab+0xc2/0x120 [ 462.880348] __kmalloc_noprof+0xc8/0x760 [ 462.880370] ? ext4_find_extent+0x7f5/0xa00 [ 462.880394] ? ext4_find_extent+0x7f5/0xa00 [ 462.880412] ext4_find_extent+0x7f5/0xa00 [ 462.880435] ext4_ext_map_blocks+0x1cc/0x5f70 [ 462.880455] ? finish_task_switch.isra.0+0x206/0x840 [ 462.880478] ? trace_sched_exit_tp+0xbf/0x100 [ 462.880499] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 462.880515] ? crc32c+0x1ae/0x350 [ 462.880535] ? lock_acquire+0x15e/0x2f0 [ 462.880551] ? ext4_map_blocks+0x55b/0x14a0 [ 462.880573] ? down_write+0x119/0x1f0 [ 462.880590] ? __pfx_down_write+0x10/0x10 [ 462.880605] ? ext4_es_lookup_extent+0xc8/0xb30 [ 462.880624] ext4_map_blocks+0x624/0x14a0 [ 462.880642] ? __up_read+0x197/0x750 [ 462.880659] ? __pfx_ext4_map_blocks+0x10/0x10 [ 462.880674] ? __pfx___up_read+0x10/0x10 [ 462.880692] ? lock_release+0xc8/0x290 [ 462.880709] ? ext4_map_blocks+0x1e0/0x14a0 [ 462.880728] ext4_getblk+0x682/0x8e0 [ 462.880745] ? __pfx_ext4_getblk+0x10/0x10 [ 462.880759] ? __pfx_security_inode_init_security+0x10/0x10 [ 462.880781] ? crc32c+0x1ae/0x350 [ 462.880802] ext4_bread+0x2e/0x1a0 [ 462.880818] ext4_append+0x224/0x530 [ 462.880838] ? __pfx_ext4_append+0x10/0x10 [ 462.880857] ? __pfx___ext4_new_inode+0x10/0x10 [ 462.880879] ext4_init_new_dir+0x13c/0x240 [ 462.880892] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 462.880909] ext4_mkdir+0x3c5/0xb30 [ 462.880925] ? __pfx_ext4_mkdir+0x10/0x10 [ 462.880936] ? security_inode_permission+0x72/0xe0 [ 462.880954] vfs_mkdir+0x59a/0x8d0 [ 462.880970] do_mkdirat+0x19f/0x3d0 [ 462.880988] ? __pfx_do_mkdirat+0x10/0x10 [ 462.881010] __x64_sys_mkdir+0xf3/0x140 [ 462.881027] do_syscall_64+0xbf/0x390 [ 462.881045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.881058] RIP: 0033:0x7fc4b82cdc27 [ 462.881068] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 462.881080] RSP: 002b:00007fc4b5843fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 462.881093] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b82cdc27 [ 462.881105] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000280 [ 462.881113] RBP: 00007fc4b5844040 R08: 0000000000000000 R09: 0000000000000000 [ 462.881120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 462.881128] R13: 0000000020000280 R14: 00007fc4b5844000 R15: 0000000020000580 [ 462.881145] [ 462.904405] process 'syz-executor.1' launched './file0' with NULL argv: empty string added 03:49:23 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0), 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:49:23 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) 03:49:23 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 03:49:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noi']) 03:49:23 executing program 1: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="ec8e14e6ff6dded2defe4f69f544b573776e8f98b7dfa4db0c27c768714371156f319bd466543670da4dda09312841f6", 0x30, 0x0, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) 03:49:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 21) 03:49:23 executing program 0: r0 = getpid() pidfd_open(r0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r1, 0x80045440, &(0x7f0000000300)) [ 463.070075] loop4: detected capacity change from 0 to 4 [ 463.078682] ext2: Unknown parameter 'noi' [ 463.087164] No source specified 03:49:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noi']) 03:49:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 22) [ 463.253913] FAULT_INJECTION: forcing a failure. [ 463.253913] name failslab, interval 1, probability 0, space 0, times 0 [ 463.255887] CPU: 0 UID: 0 PID: 5572 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 463.255916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 463.255929] Call Trace: [ 463.255936] [ 463.255944] dump_stack_lvl+0xfa/0x120 [ 463.255979] should_fail_ex+0x4d7/0x5e0 [ 463.256016] ? ext4_mb_new_blocks+0x64e/0x45b0 [ 463.256043] should_failslab+0xc2/0x120 [ 463.256074] kmem_cache_alloc_noprof+0x72/0x680 [ 463.256095] ? do_raw_spin_unlock+0x53/0x220 [ 463.256140] ? ext4_mb_new_blocks+0x64e/0x45b0 [ 463.256165] ext4_mb_new_blocks+0x64e/0x45b0 [ 463.256201] ? kasan_save_track+0x14/0x30 [ 463.256230] ? __kasan_kmalloc+0x7f/0x90 [ 463.256260] ? trace_kmalloc+0x1f/0xb0 [ 463.256287] ? __kmalloc_noprof+0x2c9/0x760 [ 463.256335] ? ext4_find_extent+0x7f5/0xa00 [ 463.256368] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 463.256397] ? ext4_ext_search_right+0x2e8/0xbd0 [ 463.256428] ? ext4_inode_to_goal_block+0x323/0x430 [ 463.256462] ext4_ext_map_blocks+0x1c4b/0x5f70 [ 463.256495] ? finish_task_switch.isra.0+0x294/0x840 [ 463.256533] ? trace_sched_exit_tp+0xbf/0x100 [ 463.256569] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 463.256596] ? crc32c+0x1ae/0x350 [ 463.256628] ? lock_acquire+0x15e/0x2f0 [ 463.256652] ? ext4_map_blocks+0x55b/0x14a0 [ 463.256690] ? __pfx_down_write+0x10/0x10 [ 463.256717] ? ext4_es_lookup_extent+0xc8/0xb30 [ 463.256749] ext4_map_blocks+0x624/0x14a0 [ 463.256779] ? __up_read+0x197/0x750 [ 463.256806] ? __pfx_ext4_map_blocks+0x10/0x10 [ 463.256831] ? __pfx___up_read+0x10/0x10 [ 463.256860] ? lock_release+0xc8/0x290 [ 463.256890] ? ext4_map_blocks+0x1e0/0x14a0 [ 463.256922] ext4_getblk+0x682/0x8e0 [ 463.256949] ? __pfx_ext4_getblk+0x10/0x10 [ 463.256973] ? __pfx_security_inode_init_security+0x10/0x10 [ 463.257009] ? crc32c+0x1ae/0x350 [ 463.257042] ext4_bread+0x2e/0x1a0 [ 463.257069] ext4_append+0x224/0x530 [ 463.257101] ? __pfx_ext4_append+0x10/0x10 [ 463.257132] ? __pfx___ext4_new_inode+0x10/0x10 [ 463.257170] ext4_init_new_dir+0x13c/0x240 [ 463.257189] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 463.257220] ext4_mkdir+0x3c5/0xb30 [ 463.257246] ? __pfx_ext4_mkdir+0x10/0x10 [ 463.257265] ? security_inode_permission+0x72/0xe0 [ 463.257294] vfs_mkdir+0x59a/0x8d0 [ 463.257321] do_mkdirat+0x19f/0x3d0 [ 463.257350] ? __pfx_do_mkdirat+0x10/0x10 [ 463.257386] __x64_sys_mkdir+0xf3/0x140 [ 463.257415] do_syscall_64+0xbf/0x390 [ 463.257444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.257466] RIP: 0033:0x7fc4b82cdc27 [ 463.257483] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 463.257503] RSP: 002b:00007fc4b5843fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 463.257524] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b82cdc27 [ 463.257538] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000280 [ 463.257550] RBP: 00007fc4b5844040 R08: 0000000000000000 R09: 0000000000000000 [ 463.257563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 463.257576] R13: 0000000020000280 R14: 00007fc4b5844000 R15: 0000000020000580 [ 463.257605] [ 463.372735] loop4: detected capacity change from 0 to 4 [ 463.383948] ext2: Unknown parameter 'noi' 03:49:33 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x7f, 0xc8, 0x7f}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x40, @none, 0xfd}}}, 0xb) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x97}, "cab4ed4e51e278a74911ccb412085e12caaa10caeaca83c5d263391b38cba5fb7743d85fee0a2591a9c6c154d7ca5c756b2e794ae9a049557a5b511bcc6bfe21599579b510ed229f4fdaaa090ec8122f642344b52f9437779fe66d203bdfd8fde900d430931fcea6fed7783dd3e083e68906a9eb2f2ddee9275332c6b2736ba1ef83f8ebf50f2ec931baa07c4f502477762b62a8f9b193"}, 0x9b) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x1, 0x4}, {0x1000, 0x2}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x2, 0x6fe8}}}}, 0x11) 03:49:33 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:49:33 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}}]}) 03:49:33 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:49:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0xce, 0x2, 0x81, 0x40, @mcast2, @mcast2, 0x1, 0x10, 0x4, 0x3}}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@hopopts_2292={{0x18, 0x29, 0x43}}], 0x18}}], 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}}, 0x10) 03:49:33 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 23) 03:49:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noi']) 03:49:33 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 473.194291] loop4: detected capacity change from 0 to 4 [ 473.196555] No source specified [ 473.201350] ext2: Unknown parameter 'noi' 03:49:33 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 24) 03:49:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,jour']) [ 473.247055] tmpfs: Bad value for 'mpol' [ 473.254567] tmpfs: Bad value for 'mpol' [ 473.258828] 9pnet_fd: Insufficient options for proto=fd [ 473.268650] 9pnet_fd: Insufficient options for proto=fd 03:49:33 executing program 7: r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 473.316619] loop4: detected capacity change from 0 to 4 [ 473.317494] FAULT_INJECTION: forcing a failure. [ 473.317494] name failslab, interval 1, probability 0, space 0, times 0 [ 473.318427] CPU: 0 UID: 0 PID: 5606 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 473.318443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 473.318450] Call Trace: [ 473.318455] [ 473.318459] dump_stack_lvl+0xfa/0x120 [ 473.318481] should_fail_ex+0x4d7/0x5e0 [ 473.318503] ? ext4_mb_new_blocks+0x2414/0x45b0 [ 473.318522] should_failslab+0xc2/0x120 [ 473.318542] kmem_cache_alloc_noprof+0x72/0x680 [ 473.318560] ? ext4_mb_new_blocks+0x2414/0x45b0 [ 473.318574] ext4_mb_new_blocks+0x2414/0x45b0 [ 473.318593] ? kasan_save_track+0x14/0x30 [ 473.318609] ? __kasan_kmalloc+0x7f/0x90 [ 473.318625] ? trace_kmalloc+0x1f/0xb0 [ 473.318640] ? __kmalloc_noprof+0x2c9/0x760 [ 473.318659] ? ext4_find_extent+0x7f5/0xa00 [ 473.318677] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 473.318693] ? ext4_ext_search_right+0x2e8/0xbd0 [ 473.318710] ? ext4_inode_to_goal_block+0x323/0x430 [ 473.318728] ext4_ext_map_blocks+0x1c4b/0x5f70 [ 473.318745] ? lock_acquire+0x15e/0x2f0 [ 473.318760] ? fs_reclaim_acquire+0xae/0x150 [ 473.318776] ? lock_is_held_type+0x9e/0x120 [ 473.318793] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 473.318807] ? crc32c+0x1ae/0x350 [ 473.318825] ? lock_acquire+0x15e/0x2f0 [ 473.318838] ? ext4_map_blocks+0x55b/0x14a0 [ 473.318859] ? __pfx_down_write+0x10/0x10 [ 473.318873] ? ext4_es_lookup_extent+0xc8/0xb30 [ 473.318890] ext4_map_blocks+0x624/0x14a0 [ 473.318907] ? __up_read+0x197/0x750 [ 473.318922] ? __pfx_ext4_map_blocks+0x10/0x10 [ 473.318935] ? __pfx___up_read+0x10/0x10 [ 473.318951] ? lock_release+0xc8/0x290 [ 473.318967] ? ext4_map_blocks+0x1e0/0x14a0 [ 473.318984] ext4_getblk+0x682/0x8e0 [ 473.318999] ? __pfx_ext4_getblk+0x10/0x10 [ 473.319012] ? __pfx_security_inode_init_security+0x10/0x10 [ 473.319032] ? crc32c+0x1ae/0x350 [ 473.319050] ext4_bread+0x2e/0x1a0 [ 473.319065] ext4_append+0x224/0x530 [ 473.319082] ? __pfx_ext4_append+0x10/0x10 [ 473.319102] ? __pfx___ext4_new_inode+0x10/0x10 [ 473.319124] ext4_init_new_dir+0x13c/0x240 [ 473.319135] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 473.319151] ext4_mkdir+0x3c5/0xb30 [ 473.319165] ? __pfx_ext4_mkdir+0x10/0x10 [ 473.319175] ? security_inode_permission+0x72/0xe0 [ 473.319191] vfs_mkdir+0x59a/0x8d0 [ 473.319206] do_mkdirat+0x19f/0x3d0 [ 473.319222] ? __pfx_do_mkdirat+0x10/0x10 [ 473.319241] __x64_sys_mkdir+0xf3/0x140 [ 473.319257] do_syscall_64+0xbf/0x390 [ 473.319273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.319286] RIP: 0033:0x7fc4b82cdc27 [ 473.319295] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 473.319306] RSP: 002b:00007fc4b5843fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 473.319317] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b82cdc27 [ 473.319325] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000280 [ 473.319332] RBP: 00007fc4b5844040 R08: 0000000000000000 R09: 0000000000000000 [ 473.319339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 473.319345] R13: 0000000020000280 R14: 00007fc4b5844000 R15: 0000000020000580 [ 473.319361] [ 473.346234] ext2: Unknown parameter 'jour' 03:49:33 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:49:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x5) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:49:33 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a00602000405109050006"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 03:49:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,jour']) [ 473.439232] loop4: detected capacity change from 0 to 4 [ 473.445727] ext2: Unknown parameter 'jour' 03:49:33 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:49:33 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a0060208140e4f3040006"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:49:33 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 25) 03:49:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,jour']) [ 473.577357] No source specified [ 473.587096] loop4: detected capacity change from 0 to 4 [ 473.592261] ext2: Unknown parameter 'jour' 03:49:33 executing program 7: r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:49:33 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x4, 0x17}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 473.622430] 9pnet_fd: Insufficient options for proto=fd [ 473.639529] 9pnet_fd: Insufficient options for proto=fd 03:49:33 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a0060208040e409001006715f9966cb0f2277949ff935f5b417cac3981c51d389366437e07d167b6880afbe432982287d929bf3377f6f43a20d7c"], 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x67}, "3cb70c5455f97eb2eaeb1cd82663a9cbfb09e3bf28ec5ad1fe687d527887f89aaaa31c3fcc71dd76bd3691dbbb77ea96019fe0e97024350abae3d171867f1df85b17bda8c44baedf9565a81c73f62fe267ae81ac9e37442ff4527e6e97b78af48da08b28de64e0"}, 0x6b) 03:49:33 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 26) [ 473.762548] 9pnet_fd: Insufficient options for proto=fd [ 473.785160] 9pnet_fd: Insufficient options for proto=fd [ 473.809083] FAULT_INJECTION: forcing a failure. [ 473.809083] name failslab, interval 1, probability 0, space 0, times 0 [ 473.811461] CPU: 1 UID: 0 PID: 5640 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 473.811495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 473.811510] Call Trace: [ 473.811520] [ 473.811529] dump_stack_lvl+0xfa/0x120 [ 473.811570] should_fail_ex+0x4d7/0x5e0 [ 473.811609] ? __es_remove_extent+0x53f/0x1570 [ 473.811641] ? __es_insert_extent+0xed2/0x1370 [ 473.811665] should_failslab+0xc2/0x120 [ 473.811702] kmem_cache_alloc_noprof+0x72/0x680 [ 473.811731] ? __pfx___es_remove_extent+0x10/0x10 [ 473.811764] ? __es_insert_extent+0xed2/0x1370 [ 473.811790] __es_insert_extent+0xed2/0x1370 [ 473.811832] ext4_es_insert_extent+0x4d0/0x1100 [ 473.811867] ? crc32c+0x1ae/0x350 [ 473.811904] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 473.811933] ? lock_acquire+0x15e/0x2f0 [ 473.811963] ? ext4_map_blocks+0x55b/0x14a0 [ 473.812009] ? __pfx_down_write+0x10/0x10 [ 473.812040] ? ext4_es_lookup_extent+0xc8/0xb30 [ 473.812078] ext4_map_blocks+0x7ff/0x14a0 [ 473.812122] ? __up_read+0x197/0x750 [ 473.812154] ? __pfx_ext4_map_blocks+0x10/0x10 [ 473.812184] ? __pfx___up_read+0x10/0x10 [ 473.812219] ? lock_release+0xc8/0x290 [ 473.812254] ? ext4_map_blocks+0x1e0/0x14a0 [ 473.812292] ext4_getblk+0x682/0x8e0 [ 473.812325] ? __pfx_ext4_getblk+0x10/0x10 [ 473.812353] ? __pfx_security_inode_init_security+0x10/0x10 [ 473.812396] ? crc32c+0x1ae/0x350 [ 473.812435] ext4_bread+0x2e/0x1a0 [ 473.812486] ext4_append+0x224/0x530 [ 473.812525] ? __pfx_ext4_append+0x10/0x10 [ 473.812562] ? __pfx___ext4_new_inode+0x10/0x10 [ 473.812607] ext4_init_new_dir+0x13c/0x240 [ 473.812631] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 473.812666] ext4_mkdir+0x3c5/0xb30 [ 473.812696] ? __pfx_ext4_mkdir+0x10/0x10 [ 473.812719] ? security_inode_permission+0x72/0xe0 [ 473.812753] vfs_mkdir+0x59a/0x8d0 [ 473.812785] do_mkdirat+0x19f/0x3d0 [ 473.812819] ? __pfx_do_mkdirat+0x10/0x10 [ 473.812862] __x64_sys_mkdir+0xf3/0x140 [ 473.812896] do_syscall_64+0xbf/0x390 [ 473.812931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.812957] RIP: 0033:0x7fc4b82cdc27 [ 473.812976] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 473.813000] RSP: 002b:00007fc4b5843fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 473.813024] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b82cdc27 [ 473.813040] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000280 [ 473.813055] RBP: 00007fc4b5844040 R08: 0000000000000000 R09: 0000000000000000 [ 473.813070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 473.813086] R13: 0000000020000280 R14: 00007fc4b5844000 R15: 0000000020000580 [ 473.813120] [ 473.883785] No source specified 03:49:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_iop']) 03:49:43 executing program 0: clone3(&(0x7f0000000200)={0x8000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x8}, &(0x7f00000000c0)=""/52, 0x34, &(0x7f0000000100)=""/78, &(0x7f0000000180)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) wait4(r0, &(0x7f0000000280), 0x8, &(0x7f00000002c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2400c0c0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) 03:49:43 executing program 1: r0 = clone3(&(0x7f0000000480)={0x104080400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x36}, &(0x7f0000000140)=""/218, 0xda, &(0x7f0000000240)=""/255, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) syz_io_uring_setup(0x179a, &(0x7f0000000400)={0x0, 0x319b, 0x1, 0x0, 0x38d, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 03:49:43 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES64], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c90010df13b2d7d4c184b930c64e43000000006c87e431e9bf8a6a486c7458031b35f8fd5139f0e7ca46729899067241770931f521c23a5693e9c0bc4939b020897ec8af6c6533170eac4478a90a7373d8100f40ef4629aacca4f47373beba9f1d04000000000000000d50392bdd5923c8a7fbc6271e3981216de6a23b8234e2a6051db1cf4c9105994ff3f4d9cf56b58c8c9fe5cca29dff6ec50d4b16f05fbbc87b3395ec0ef4e74e9311bed66bd556e2ce9fb2da6b3481786768c0a620a2f21eb98404761b20bfee"], 0x14) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xdb}, "564189a51d4aaf928b183a6d3fc1d29061e266194c4ff732849f57c6d6b4b6f80ef7c344ebf7d1bf421158f71cd99def85b846c1982ac83dfeff73771ff91b9b7e6c9b5c5eb37f2db70b9771e244449185ea13c63b09044b269d49b2068b5efe91765e5fb24adbc5b94c86dbab9c9369f1f4a40746f5c793cd7f09069157593ba517e7c501a9d05ce70f45ad588c19c36d1dfc470b1eaf2d0936ce3e6ef157bcb2b20530b10163572bcf495335a5d96b21dd598cb720c1bc837076b96d84b21d04c4c6f53e4cb9d1eb6a53e10cac6a9dffcbe0f0b840ca1842928f"}, 0xdf) 03:49:43 executing program 7: r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:49:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 27) 03:49:43 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x2, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_conn_rsp={{0x3, 0x81, 0x8}, {0x200, 0x800, 0xfffe, 0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3f}}]}}, 0xfffffffffffffc70) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:49:43 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 483.241485] No source specified [ 483.263570] loop4: detected capacity change from 0 to 4 03:49:43 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x32}, @l2cap_cid_signaling={{0x2e}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0x5, 0x2}}, @l2cap_disconn_req={{0x6, 0x20, 0x4}, {0x2, 0x1000}}, @l2cap_conn_rsp={{0x3, 0x4c, 0x8}, {0x5, 0x0, 0x75, 0x401}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x5, 0x12, 0xfff, 0x5}}, @l2cap_cmd_rej_unk={{0x1, 0x6d, 0x2}, {0x5}}]}}, 0x37) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 483.281412] ext2: Unknown parameter 'journal_iop' 03:49:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 28) [ 483.303559] EXT4-fs warning (device sda): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed [ 483.307477] 9pnet_fd: Insufficient options for proto=fd [ 483.318489] 9pnet_fd: Insufficient options for proto=fd 03:49:43 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 483.369149] FAULT_INJECTION: forcing a failure. [ 483.369149] name failslab, interval 1, probability 0, space 0, times 0 [ 483.370056] CPU: 0 UID: 0 PID: 5671 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 483.370073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 483.370080] Call Trace: [ 483.370085] [ 483.370090] dump_stack_lvl+0xfa/0x120 [ 483.370121] should_fail_ex+0x4d7/0x5e0 [ 483.370147] ? jbd2_journal_add_journal_head+0x367/0x5d0 [ 483.370169] should_failslab+0xc2/0x120 [ 483.370189] kmem_cache_alloc_noprof+0x72/0x680 [ 483.370207] ? jbd2_journal_add_journal_head+0x367/0x5d0 [ 483.370227] jbd2_journal_add_journal_head+0x367/0x5d0 [ 483.370249] jbd2_journal_get_create_access+0x44/0x560 [ 483.370264] ? lock_is_held_type+0x9e/0x120 [ 483.370282] __ext4_journal_get_create_access+0x54/0x1b0 [ 483.370304] ext4_getblk+0x3c9/0x8e0 [ 483.370321] ? __pfx_ext4_getblk+0x10/0x10 [ 483.370335] ? __pfx_security_inode_init_security+0x10/0x10 [ 483.370357] ? crc32c+0x1ae/0x350 [ 483.370378] ext4_bread+0x2e/0x1a0 [ 483.370394] ext4_append+0x224/0x530 [ 483.370414] ? __pfx_ext4_append+0x10/0x10 [ 483.370432] ? __pfx___ext4_new_inode+0x10/0x10 [ 483.370454] ext4_init_new_dir+0x13c/0x240 [ 483.370465] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 483.370482] ext4_mkdir+0x3c5/0xb30 [ 483.370497] ? __pfx_ext4_mkdir+0x10/0x10 [ 483.370508] ? security_inode_permission+0x72/0xe0 [ 483.370525] vfs_mkdir+0x59a/0x8d0 [ 483.370541] do_mkdirat+0x19f/0x3d0 [ 483.370558] ? __pfx_do_mkdirat+0x10/0x10 [ 483.370579] __x64_sys_mkdir+0xf3/0x140 [ 483.370595] do_syscall_64+0xbf/0x390 [ 483.370613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.370627] RIP: 0033:0x7fc4b82cdc27 [ 483.370636] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 483.370648] RSP: 002b:00007fc4b5843fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 483.370660] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b82cdc27 [ 483.370668] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000280 [ 483.370676] RBP: 00007fc4b5844040 R08: 0000000000000000 R09: 0000000000000000 [ 483.370683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 483.370691] R13: 0000000020000280 R14: 00007fc4b5844000 R15: 0000000020000580 [ 483.370707] [ 483.387693] ENOMEM in journal_alloc_journal_head, retrying. 03:49:43 executing program 6: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04017d06673c2b606f5d3b192cd60650ad605a000000"], 0xd) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcf}, "0ca4f8c4d2699a12f3e74e982a97c8059b73f8e53002acaedb872a952e70acd3bb66f59864bb3a79179b88628cac0f762ced16a13e97cb4018eba98863fcb7b21affc3e2088e2180c5f6ddb64cf952b8ecde33ae86eeddcbb0498d3219782c789acad647c5d2460efbcf35549993394d6f321c18f296d21d5f5794f43b60ee12918f05388ab3656519c8257ec2062ed5a587b2785b490d07e770ac94a62ec97e2ebfbab5d09e147227830f855198e037b8bc77da2e7e1f97da0abcc5b7c6734e31e19aa3f682a6303f56d1834519ea"}, 0xd3) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 483.437829] No source specified 03:49:43 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4b}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c005}, 0x91) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{}, {0x7, 0xc8, 0x9, 0x5, 0x3, 0x5}}}, 0xa7) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa6}, "277f13799b9f54100d3297f1e1c10a23d2f89e4a7bf032f4d0da63e9e00ad1aaccca8a93cce44f739a0287b887747fbb30d3d3f68f3b298e80d4fe68346c4e79d056b33dc02bbc7bbda30be16cbbd3452a513884a4ad95f4e7a4bc5d0b70e8d749d554e0f094838730557e23707a309ea3a01287eec8723fa546b56cb55cb21244fcb597573ae4d226e573cfc9e2b6f9df8435b77cd4f157a4ad77867a97e2b1b04492e9c467"}, 0xaa) [ 483.462459] EXT4-fs warning (device sda): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed 03:49:55 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:49:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_iop']) 03:49:55 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) write(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:49:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = memfd_secret(0x80000) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="b5984ac3a09e0dff39e46f6c124635163d2c98f3ea7ee99773f6523894a0367ec4f6df7f5eacc9dae186cb1ca9865e4374fc83d60616e89623974bede04756bb21efacd4f82f5739bd68bfcf1d3508b280df4068a13a0b6bf5c506a21e37c97602f316517260fa91f35fb57dec238aec8d4ce96e01374aefd7ab74758b866e304814d47a039a138b54c58a2bb80f33cbf58eff7c1d9ed6aeccf0d85dc37004c73d24afeb7803a8c28c443fd51a8ef7ca75982836de053b1c5f81fa2adac9af9cd6929677", 0xc4}, {&(0x7f00000001c0)="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", 0x1000}], 0x2, &(0x7f0000001200)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x32, 0x2, '\x00', [@generic={0x8, 0xc, "f902d0655f5d17e7c4187a04"}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x7}]}}}, @rthdrdstopts={{0xb0, 0x29, 0x37, {0x0, 0x12, '\x00', [@generic={0x85, 0x90, "7c0111e8968ecc5fff473c31e8379a6f9fb2e59a0686afce6f9affb103ad06f525afb7eceb0a05798aab09f483f866250c4f91e86828d199879f370093a4d511fef0dccdb61404d6fac7739df0e99f577408d59e2f00d29c567cbf61e6c8cda4f7f48ac53a9cdb5a1267dc0fa88e4fddd40cb09e77e70d636cc9d6e7513323d29dab702e0c2b5ddf533b1800666fea40"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x491}}], 0x110}}, {{&(0x7f0000001340)={0xa, 0x4e21, 0x5, @loopback, 0x3ff}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000001380)="0d16ef9a43495e0f624b847ef9e084324c0f169f3855bcecb42de661b08b85b05d2fdf4ecd0fa2d7ab340f1d369bfd91cea28ea5615de36cbdefac1e0acf181756e7438b6795f4ff6d9e31ca99ffc72a1ad2d5062045ae32588094537631646770fb799a65b646f472fc272f1f1c08e101af10d4a3871364099c1d7c0c68fa70", 0x80}, {&(0x7f0000001400)="9cb829ff4c8f4f0a4bca8b3f139a094339e6e37e050c02c8265ccac8c875d69c4e7cd55c8ba8170e8fa51e14a6ad436f9a37894ed8411dade34cb55c185d922466c9b11e42b8f28981d8c539dd459335919119ee7047557be5", 0x59}, {&(0x7f0000001480)="b76af6f6d2d115222eea003da378a8aaa840f2ddf1bc80886353959aa241b73d12fbc20b2988cf78e31fc53177d7ad1104b65d15ed1c46727bb77f712b8af00b11faab564fae1215b27d93625d1ba126ec17197338d5e1d3e8de6c783965e352cbda1f130301d4c9151a2dfcb95ad4d653ac19de65bdadbdab4f08c9e9f6d7b7bed46738988d57", 0x87}, {&(0x7f0000001540)="1a5f9974e7b00cce33c781dd94c95c348e9fac6528153fd0f910a938687071531596204d71c85887af7a7117bcd3b258c33895278d663a43bb186ab9f310db435a35472f985b45c986be33dd49345bd2e448f7c6408db35892de7520e658be7340cfb19153ab81c8147e1070ce2ba8edc2e60c7a3eeb452cd77b9dba62b275107e550e89091886a746c3ace7d5eb1cf55d9e2e8c17ff1eb016910df18e1ddfdf13f7806a0f5c3407868746c6642a8a4afbd5da06268ae5", 0xb7}, {&(0x7f0000001600)="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", 0xfb}, {&(0x7f0000001700)="2ced51f8e4a6e37dd47dada03f03d07946f88da5c39bf034c0739bcae5652d9fb33eab799d39dc6a2b3a0c7177ad228f735c6de4d6d40913453dc4f42bf099cb77a76cf839fa859771465d0421420a417f89d067219773a068ff11b3d68d05ae243ab48404fcc2c5a7fb97b14be6af27afe65676646849e1087d11ba9a2f9404f563a046d130ef5a5dba8f75c6b935381e31f88fc5b70c491a7384aa4dad8de746b14f912c7fdd83bc702293299fceff08c5ffb7b2807236f7a77a90290ef18773139fea6da59e", 0xc7}, {&(0x7f0000001800)="0a4ce1e44b22b292c8f40d22737d308d363efdf5954167d9c9559115aa1aad20d34a34979c141b77738ab69e34797cfcb383da54173f4096d2afeefed99fcc3f8797e148f0cd463c5e20238d94a563e0f7ec8b852fa8f4e4b3ef5839ab6e89cefda5e26b0c74635f258064b92f3a0859c72470955e3820804efb02b6b41c0bc6a8d45060f71f53bd6ed022c445816c4b4d848f0753713c0b5dfb1100dc01072b5dbf76804a708887b4bf766de9585a70c9", 0xb1}], 0x7, &(0x7f0000001d40)=ANY=[@ANYBLOB="14000000000000002900000034000000020000000000000070000000000000002900000036000000730a0000000000000502000105020001c204000000030730200000010a960080000200000000000001010000000000008000000000000000000200000000000000000000001b0100c910fc020000000000000000000000000001000000000000300000000000000029000000360000000003000000000000c910fe8000000000000000000000000000aa0101000001008d3c0180809ae7ddb7eed76e606bc5d9e00baba5faf607"], 0xb8}}, {{&(0x7f0000001a00)={0xa, 0x4e24, 0x106, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffffffe}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001a40)="0f82a468b880a6c29306fa50596a5da759135b5480127f7e75ce3bde858cb41478b13e11d39fb85765ec5618b084133ba74f7770c85009a3e068e2f9ed34274ba668e31df77ee9e9168e6261b341124ffc6efd0a28240da5b55277054119fe1aeb8d876080996ac9b1219602349d74a3f54224a31ffdae340152f953d7159267e1414ab576ef7647f90b9b35f75921293a97dff06f13bb54165db1313ae1053fbaeb10d4eaa25abda701acc08616dfe190148db9ff9fb2a13ca39498246c77967ee202da5f8c62d714bbe76b0a1934f388890de012e5b3c62cececaef664583b076829", 0xe3}], 0x1, &(0x7f0000001b80)=[@dstopts={{0x88, 0x29, 0x37, {0x0, 0xd, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x58, {0x1, 0x14, 0x20, 0x1f, [0x8, 0x400, 0x2, 0x9, 0x200, 0x1, 0x1, 0xfffffffffffffffa, 0x5, 0x4]}}]}}}, @tclass={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0xc8}}], 0x3, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r2, 0x0, 0xdb75) 03:49:55 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a0060208140e409050006a2987ed5d83eb2"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:49:55 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x159, 0x3, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x1f, 0x8}, {0x20, 0x4, 0x5, 0xfff}}}}, 0x15) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:49:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000940)={'wlan1\x00'}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100204000104fddbdf250200000014000700ff02000000000000000000000000000108000800e00000020500020002000000"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x84) r5 = open_tree(r2, &(0x7f0000000440)='./file0\x00', 0x1000) write$binfmt_elf64(r5, &(0x7f0000000980)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x8, 0x40, 0x7f, 0x80000000, 0x2, 0x3e, 0x0, 0x350, 0x40, 0x267, 0x0, 0x2d, 0x38, 0x1, 0x7f, 0x7, 0x5}, [{0x3, 0x3, 0x3b, 0x7, 0x0, 0x99b, 0x24c, 0x8}], "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", ['\x00', '\x00']}, 0x1278) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@noextend}]}}) r8 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x282000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f472616e75a93214000000533ba9e4", @ANYRESHEX=r1, @ANYRES16=r6, @ANYRESDEC=r2, @ANYBLOB="2c6e6f6578746530162c00"]) bind$bt_sco(r8, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="000088ca010300f860eb810009000254fd1629f964d2517e32502484a6d1115dbc165ed444a3afe899fb8a5361f958ccc800eee5667bbc9f91126a608365af3c6904fe83a43c2eecc94d93662f731b6a03700f5f21f1e22a89797ef8020d432267dc9226a9b88b68577f7e3ccdc70e0300000000000000f9e9d0df0bf0f171662db38b0b4bea"], 0x12) 03:49:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 29) [ 494.847089] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 494.857330] loop4: detected capacity change from 0 to 4 [ 494.866914] ext2: Unknown parameter 'journal_iop' [ 494.871999] No source specified [ 494.937201] 9pnet_fd: Insufficient options for proto=fd 03:49:55 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="e30d0a000600000000000000000393143a29"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:49:55 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:49:55 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e801eca0f87d80a0060208140e409050006"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04226307ffffffffffff01045aac39080003aaaaaaaaaa11ce1ffac770020022ffffffffffff0400b6174b090009ffffffffffff760c03121907e19600000000000031404ca63d080003ffffffffffff090138461900001faaaaaaaaaa12802f73e3040fadf35c0dcad3060080"], 0x66) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xffffffffffffff93}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xc393, 0x40, 0x3, 0x6}}}}, 0xd) 03:49:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_iop']) 03:49:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 30) [ 495.169796] loop4: detected capacity change from 0 to 4 [ 495.196033] ext2: Unknown parameter 'journal_iop' 03:50:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 31) 03:50:06 executing program 6: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="3f700fb420040e2afa5f200040e409050006"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:50:06 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="edeaae2e93fbcf8cd30289b6da0302678100c06cb75cc173085e960b84f376dd3714563b54ee04df335adf2f124e694ae98f749748df825556a45016ce89b127e0465a06c2d4fd20a629bcdc863a8051098a98341e1d4621db30d9655ad9a9ec9b7bd2351601d99da5fa1d320710", @ANYRESDEC, @ANYRES16=r0], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x47}, "a82245529f36ba11e1d9e7031f7c5d3dcbfc8a9dff32cf6de186cea5e577a99088e01bd4c2c6a1ba98bc9fec8ce35336cb0fe9eaaf46d8560e7aee8b0f6b82111aae6b58a1db74"}}, 0x4a) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:50:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:50:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)='/dev/full\x00', &(0x7f0000000180)=']!,#\\\x00'], &(0x7f0000000480)=[&(0x7f0000000200)='-[&#\x00', &(0x7f0000000240)='/dev/full\x00', &(0x7f0000000280)='/dev/full\x00', &(0x7f00000002c0)='/dev/full\x00', &(0x7f0000000300)='/dev/full\x00', &(0x7f0000000340)='/dev/full\x00', &(0x7f0000000380)='/dev/full\x00', &(0x7f00000003c0)='^]&\x00', &(0x7f0000000400)='/dev/full\x00', &(0x7f0000000440)='/dev/full\x00']) 03:50:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=']) 03:50:06 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:50:06 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) write(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 506.161678] loop4: detected capacity change from 0 to 4 [ 506.171337] No source specified [ 506.172399] ext2: Bad value for 'journal_ioprio' 03:50:06 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="bab20aee5f7ed9e45bfc0267b0bb92bb80b0080000000000000200"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:50:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=']) 03:50:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 32) [ 506.293594] 9pnet_fd: Insufficient options for proto=fd [ 506.304659] 9pnet_fd: Insufficient options for proto=fd 03:50:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:50:06 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a00f376f0680000000000"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:50:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "e6dd0696eeec0fa58880b892a595e6d438ddd7f522b5463e9404bd25910b16aa15aac77da8fe24ae2a00cc8e815eba0434a3a97bcd6ea942a21dbfbc50977ce744e99dddcd0192e776e6f38099894e4c"}, 0xd8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x58) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) mq_timedreceive(r1, &(0x7f0000000180)=""/233, 0xe9, 0x1, 0x0) [ 506.410437] loop4: detected capacity change from 0 to 4 [ 506.433563] No source specified 03:50:06 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 506.446824] ext2: Bad value for 'journal_ioprio' 03:50:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 33) 03:50:06 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a0042200040e409050006"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3}}}, 0x4) 03:50:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=']) 03:50:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 506.644916] FAULT_INJECTION: forcing a failure. [ 506.644916] name failslab, interval 1, probability 0, space 0, times 0 [ 506.646997] CPU: 0 UID: 0 PID: 5771 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 506.647029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 506.647043] Call Trace: [ 506.647050] [ 506.647059] dump_stack_lvl+0xfa/0x120 [ 506.647098] should_fail_ex+0x4d7/0x5e0 [ 506.647147] should_failslab+0xc2/0x120 [ 506.647182] __kmalloc_cache_noprof+0x73/0x6a0 [ 506.647204] ? __might_fault+0xe0/0x190 [ 506.647237] ? copy_mount_options+0x55/0x180 [ 506.647278] ? copy_mount_options+0x55/0x180 [ 506.647310] ? memdup_user+0x95/0xe0 [ 506.647334] copy_mount_options+0x55/0x180 [ 506.647371] __x64_sys_mount+0x1ab/0x310 [ 506.647402] ? __pfx___x64_sys_mount+0x10/0x10 [ 506.647443] do_syscall_64+0xbf/0x390 [ 506.647475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.647499] RIP: 0033:0x7fc4b82d004a [ 506.647517] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 506.647539] RSP: 002b:00007fc4b5843fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 506.647562] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b82d004a [ 506.647578] RDX: 0000000020000000 RSI: 0000000020000280 RDI: 0000000000000000 [ 506.647592] RBP: 00007fc4b5844040 R08: 00007fc4b5844040 R09: 0000000020000000 [ 506.647607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 506.647621] R13: 0000000020000280 R14: 00007fc4b5844000 R15: 0000000020000580 [ 506.647651] 03:50:06 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0a0160208160e409050006d702a0659d59c173f096a2048fc3e55d98de4df8d09fd49b0fac000000000cefe708f8f3920418c8b1d31dc082bc5c21149994b59fd7e6e23f86754c6d4d85d64b5333546d474b9e5f01d75ceefd00f1a30748d97ebe3a801f108895213c6087ccc56a3a46c82fa4c7d6de300110ed1f86056995227bca2dd8eb1f39aa247d94a57e6ad19f16473c92989dde561e4dc6cccdeac3dcebf1e91a200012fbf450c908218c1ebdefa5094b03385a9ed4ba878760a5fbfda740fbf32aa06392f6ce21b202ee603bd4ef5ab4ff6ac62455dd196eca0ffab07bc39ce2cb74c8362183f8ae63340d9f6cdfac6b90817a04e3f45c12a327dfb849eb2e317a48aa62491f50e62e6e13ad6892947d04db29233e7eb206fd9ce79dc18a66f0cb6c3dd0276c105b0000e02b3535f62ee634a1e039bbe5f4fa2462475ceaba1c1e721a8408bc73d32a0579f328f3b9f8c5361a5af7b9657e07a48b5202e9876be65ddef36f0b7c23bc5d8129a553a256ba17cf7de106dd54e85cd6d3dbce45a5726b2ef339e839678c0dacd010cdf7db11f3530df953fd81fbbd1571407ab25b25a17827c0970ab8caf3bb8520e8bf828d10da712a3f589823e05c5626fb8e552b"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:50:06 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "15b3dd68c39bbbea4cb4575a60caf475fcb55fb3e8754eef27fa64b6ce20d633dc627e0be711b984ad01aadbfb0783991a9652d5f40a8dfc031e8a48bfd573526189d6ccb968978f9e241f6701bfb0717977d5f8381195a2082bc6d8510f2b5a6325fc9986de764d4eefac3f2f40d22e7fab48c9ee06a1ffce3a06028f1229deff6ce2e5a8238f43662dbbf8a66fda33cc75ac40568acede3504f36659d7b101181a4d45885ad6232deb53d86ee869436811cc6a2b2678a8a04e2f7f995974d9837fda5c1647fc0d3837a06b62d36a9a75c21fe1a4ff53bafc55df4ed9725ffc4bdd6896f85b1c18554570f9957de8c8d56c9452446c2b5d"}}}, 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0xff, 0xc9}}}, 0x5) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 506.793837] loop4: detected capacity change from 0 to 4 03:50:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x40, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) r5 = dup2(r2, r3) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r5, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r0, 0x0, &(0x7f0000000040)='./file1\x00', 0x31, 0x400, 0x12345}, 0x7) truncate(&(0x7f0000000240)='./file1\x00', 0x10000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) [ 506.814422] ext2: Bad value for 'journal_ioprio' 03:50:16 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x25}, @l2cap_cid_signaling={{0x21}, [@l2cap_create_chan_rsp={{0xd, 0xf9, 0x8}, {0xceb, 0x2, 0x8, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x7, 0x81, 0x7, 0x2}}, @l2cap_create_chan_req={{0xc, 0x3f, 0x5}, {0x3, 0x3, 0xfb}}]}}, 0x2a) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x1f, 0xa}, {0x0, 0x0, 0x4, 0x2, 0x3}}}}, 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:50:16 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:50:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:50:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 34) 03:50:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x']) 03:50:16 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_conf_req={{0x4, 0x6, 0x1f}, {0x5, 0xd007, [@l2cap_conf_ews={0x7, 0x2, 0xc000}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_mtu={0x1, 0x2, 0xfe64}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x991}, @l2cap_conf_flushto={0x2, 0x2, 0xcfc}]}}, @l2cap_move_chan_rsp={{0xf, 0x44, 0x4}, {0x0, 0xff29}}, @l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0x4, 0x3}}, @l2cap_conf_rsp={{0x5, 0x3, 0x27}, {0x3, 0x8, 0x800, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x9}, @l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x90, 0x8, 0x9, 0x10001}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x6, 0x2}, {0x2}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x40, 0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x17e}}]}}, 0x7c) 03:50:16 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000015c0)={0x2, &(0x7f00000000c0)=[{0x6, 0x0, 0xff}, {0x7, 0x2b, 0x58, 0x8}]}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = signalfd4(r1, &(0x7f0000000000)={[0x4]}, 0x8, 0x80000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0xd7, 0x2, 0x7f, 0x7}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001600)) 03:50:16 executing program 0: lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb58906d2be6732e66617400020820000400006b9cb2", 0x16}, {&(0x7f0000000240)="52d7a8ed976fc542fbc24f51021fc9fe8bf8d710c2d029253822f6b2a72c53c349f2644627adb8b8b90288c28e423da00694d72a88276761b3107ef17edd413312c97ef539a0979f409efb506f5fa0e2e02ca8f3fa03d87dd8905c6dd7192209d1124cdb2482286b71453b9e676bae8f62c14efc5202feeb091375d57efc880718fae3957f7ffbb4183b29", 0x8b}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="647d342f633c8653a55d75916451ca13a96e756d7461696c3d312c757466383d302c66736e4a6d653d"]) [ 516.128540] loop4: detected capacity change from 0 to 4 [ 516.134090] ext2: Bad value for 'journal_ioprio' [ 516.136206] vfat: Unknown parameter 'd}4/c<†S¥]u‘dQÊ©numtail' [ 516.147192] vfat: Unknown parameter 'd}4/c<†S¥]u‘dQÊ©numtail' [ 516.163297] No source specified 03:50:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x']) [ 516.252348] loop4: detected capacity change from 0 to 4 [ 516.253059] 9pnet_fd: Insufficient options for proto=fd [ 516.256780] ext2: Bad value for 'journal_ioprio' 03:50:27 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x4, 0x400}}}}, 0x11) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}}}, 0xa) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x1f, @none, "dd471fabb36b13c0fe2c2a2d2d33952094713f2269a70aa480ef9410f7ae6b1deeeec3dae57379e35670e6148fe5e08e1ea92bfc028a467672bcdcbe84a0272cce5f778c81a052cae36f1ba40af3f6ce386869d673151dd46fbac8e64bc4cf2dcdb263f6c68b851eb6fa2606905376451dff72321c2cfa1a23278c59d1c86f223b05e916bdb3c7fc6024d00190b415985d4d16662c43535a3b2bdb9465fd19dce042fab9ef82f4f04c002773c6dfcecd99283faf724e4e187d1bf5e932484628c4c71eb3a975cbb9c4c3ed559dc37eca8beaee545f776513a65f9d5fc21ddbcd76f6a6498644452027eeb609556ffe7a56218fcf49a6bdf6"}}}, 0x102) 03:50:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 35) 03:50:27 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0), 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:50:27 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:50:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x']) 03:50:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:50:27 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e3c0a006020e6d1ac930500"], 0xd) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x23) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:50:27 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 527.786564] 9pnet_fd: Insufficient options for proto=fd [ 527.792742] FAULT_INJECTION: forcing a failure. [ 527.792742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.794720] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 527.794751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 527.794763] Call Trace: [ 527.794771] [ 527.794780] dump_stack_lvl+0xfa/0x120 [ 527.794816] should_fail_ex+0x4d7/0x5e0 [ 527.794856] _copy_from_user+0x30/0xd0 [ 527.794878] copy_mount_options+0x76/0x180 [ 527.794917] __x64_sys_mount+0x1ab/0x310 [ 527.794947] ? __pfx___x64_sys_mount+0x10/0x10 [ 527.794985] do_syscall_64+0xbf/0x390 [ 527.795017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.795040] RIP: 0033:0x7fc4b82d004a [ 527.795057] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 527.795079] RSP: 002b:00007fc4b5843fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 527.795109] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b82d004a [ 527.795123] RDX: 0000000020000000 RSI: 0000000020000280 RDI: 0000000000000000 [ 527.795137] RBP: 00007fc4b5844040 R08: 00007fc4b5844040 R09: 0000000020000000 [ 527.795151] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 527.795165] R13: 0000000020000280 R14: 00007fc4b5844000 R15: 0000000020000580 [ 527.795193] [ 527.807505] loop4: detected capacity change from 0 to 4 03:50:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 527.865153] ext2: Bad value for 'journal_ioprio' [ 527.892481] No source specified 03:50:28 executing program 6: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 527.915496] 9pnet_fd: Insufficient options for proto=fd 03:50:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0469bb90edbe650af623f93bd3d2d3851697d8fc5c6c831c8f77a7dd9ab5adaeaf4e757059ba43b3c0eb5d295ab76212c13f7600"/73], 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x6a}, {0x5, "0cbead73689f006173672b5d91394fba1e8070fd26d254fea7e5a492df8bf3c43ec6e317a6b4a8a608041e43ed2e4390936d28707e93bf0a0f75490f1317a3262c9bc66c99001c3c05d5c476a99c0408926f3e0852468173dd034f9f8fab8be58b33518aa10fb711"}}}, 0x6d) [ 528.103406] FAULT_INJECTION: forcing a failure. [ 528.103406] name failslab, interval 1, probability 0, space 0, times 0 [ 528.105540] CPU: 1 UID: 0 PID: 5857 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 528.105570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 528.105583] Call Trace: [ 528.105590] [ 528.105598] dump_stack_lvl+0xfa/0x120 [ 528.105635] should_fail_ex+0x4d7/0x5e0 [ 528.105671] ? getname_flags.part.0+0x48/0x540 [ 528.105692] should_failslab+0xc2/0x120 [ 528.105725] kmem_cache_alloc_noprof+0x72/0x680 [ 528.105756] ? getname_flags.part.0+0x48/0x540 [ 528.105774] getname_flags.part.0+0x48/0x540 [ 528.105796] getname_flags+0x95/0xe0 [ 528.105822] user_path_at+0x27/0x90 [ 528.105848] __x64_sys_mount+0x1fb/0x310 [ 528.105877] ? __pfx___x64_sys_mount+0x10/0x10 [ 528.105913] do_syscall_64+0xbf/0x390 [ 528.105943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.105965] RIP: 0033:0x7fc4b82d004a [ 528.105982] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 528.106002] RSP: 002b:00007fc4b5843fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 528.106023] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b82d004a [ 528.106037] RDX: 0000000020000000 RSI: 0000000020000280 RDI: 0000000000000000 [ 528.106050] RBP: 00007fc4b5844040 R08: 00007fc4b5844040 R09: 0000000020000000 [ 528.106063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 528.106076] R13: 0000000020000280 R14: 00007fc4b5844000 R15: 0000000020000580 [ 528.106112] 03:50:28 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 36) 03:50:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:50:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 1) 03:50:28 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) 03:50:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0xfc}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@none, "bfed89d51ee8ad95b5475ac942d60987", 0x37}}}, 0x1a) 03:50:28 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 37) [ 528.329106] FAULT_INJECTION: forcing a failure. [ 528.329106] name failslab, interval 1, probability 0, space 0, times 0 [ 528.331065] CPU: 1 UID: 0 PID: 5866 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 528.331094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 528.331113] Call Trace: [ 528.331120] [ 528.331128] dump_stack_lvl+0xfa/0x120 [ 528.331164] should_fail_ex+0x4d7/0x5e0 [ 528.331201] should_failslab+0xc2/0x120 [ 528.331231] __kmalloc_cache_noprof+0x73/0x6a0 [ 528.331254] ? task_active_pid_ns+0xa9/0xd0 [ 528.331274] ? alloc_name+0x41/0x110 [ 528.331301] ? alloc_name+0x41/0x110 [ 528.331323] alloc_name+0x41/0x110 [ 528.331345] __x64_sys_memfd_create+0x130/0x280 [ 528.331370] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 528.331403] do_syscall_64+0xbf/0x390 [ 528.331432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.331455] RIP: 0033:0x7fb50750ab19 [ 528.331470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 528.331491] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 528.331511] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750ab19 [ 528.331525] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fb5075640fb [ 528.331538] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 528.331552] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 528.331565] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000180 [ 528.331592] 03:50:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 528.527905] No source specified 03:50:36 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:50:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 38) 03:50:36 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x3, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x8, 0x2}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xae, 0x2}, {0x6}}}}, 0xf) 03:50:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 2) 03:50:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0xf}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {0xf}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r9, 0x1, 0x0, 0x0, {0xf}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x3, 0x846, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8, 0x20, 0x8, 0xfffffffe}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000380)={0xa0c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8, 0x6, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x4ed}, {0x5, 0x4, 0x6, 0x7ff}, {0x8, 0xb7, 0x2, 0x4}, {0x8, 0x40, 0x5, 0xa4}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3be}}}]}}, {{0x8}, {0x294, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7524, 0x7f, 0x3, 0x3ad}, {0x0, 0xf7, 0x20, 0x101}, {0x200, 0x9, 0x3f, 0x5}, {0x2, 0x7, 0xbf, 0x6}, {0x1, 0x40, 0x2, 0x6}, {0x2, 0x4, 0x6}, {0x6dc0, 0x3, 0x0, 0x10000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}]}}]}, 0xa0c}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@any, 0x80, 0x2, 0x6, "c3070a", 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x2, 0x0, 'yj\f', 0x3}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:50:36 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:50:36 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 536.706869] loop4: detected capacity change from 0 to 4 [ 536.715878] EXT4-fs: Mount option(s) incompatible with ext2 03:50:36 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0), 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:50:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 3) [ 536.754078] FAULT_INJECTION: forcing a failure. [ 536.754078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.756377] CPU: 1 UID: 0 PID: 5890 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 536.756411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 536.756425] Call Trace: [ 536.756434] [ 536.756443] dump_stack_lvl+0xfa/0x120 [ 536.756482] should_fail_ex+0x4d7/0x5e0 [ 536.756525] strncpy_from_user+0x3b/0x2f0 [ 536.756560] getname_flags.part.0+0x8d/0x540 [ 536.756588] getname_flags+0x95/0xe0 [ 536.756617] user_path_at+0x27/0x90 [ 536.756646] __x64_sys_mount+0x1fb/0x310 [ 536.756679] ? __pfx___x64_sys_mount+0x10/0x10 [ 536.756721] do_syscall_64+0xbf/0x390 [ 536.756754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.756779] RIP: 0033:0x7fc4b82d004a [ 536.756798] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 536.756821] RSP: 002b:00007fc4b5843fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 536.756844] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b82d004a [ 536.756860] RDX: 0000000020000000 RSI: 0000000020000280 RDI: 0000000000000000 [ 536.756875] RBP: 00007fc4b5844040 R08: 00007fc4b5844040 R09: 0000000020000000 [ 536.756890] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 536.756905] R13: 0000000020000280 R14: 00007fc4b5844000 R15: 0000000020000580 [ 536.756936] [ 536.818392] 9pnet_fd: Insufficient options for proto=fd [ 536.826936] FAULT_INJECTION: forcing a failure. [ 536.826936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.827873] CPU: 0 UID: 0 PID: 5900 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 536.827890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 536.827898] Call Trace: [ 536.827902] [ 536.827907] dump_stack_lvl+0xfa/0x120 [ 536.827931] should_fail_ex+0x4d7/0x5e0 [ 536.827954] strncpy_from_user+0x3b/0x2f0 [ 536.827972] alloc_name+0x78/0x110 [ 536.827987] __x64_sys_memfd_create+0x130/0x280 [ 536.828002] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 536.828021] do_syscall_64+0xbf/0x390 [ 536.828039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.828052] RIP: 0033:0x7fb50750ab19 [ 536.828062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 536.828074] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 536.828086] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750ab19 [ 536.828094] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fb5075640fb [ 536.828106] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 536.828113] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 536.828121] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000180 [ 536.828136] 03:50:37 executing program 6: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x800) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_disconn_req={{0x6, 0x4d, 0x4}, {0x8000, 0x3}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x24}, {0x0, 0x9}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x9, 0xff, 0x7, 0x3f}}]}}, 0x25) 03:50:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x4000, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:50:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 4) 03:50:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 39) 03:50:47 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 03:50:47 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x80, 0xe}, {0x0, 0xd034, 0x9, 0x401, [0x6, 0x1ff, 0x4]}}}}, 0x1b) 03:50:47 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:50:47 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:50:47 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 547.009803] FAULT_INJECTION: forcing a failure. [ 547.009803] name failslab, interval 1, probability 0, space 0, times 0 [ 547.010853] CPU: 0 UID: 0 PID: 5922 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 547.010869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 547.010877] Call Trace: [ 547.010881] [ 547.010885] dump_stack_lvl+0xfa/0x120 [ 547.010909] should_fail_ex+0x4d7/0x5e0 [ 547.010931] should_failslab+0xc2/0x120 [ 547.010949] __kmalloc_cache_noprof+0x73/0x6a0 [ 547.010960] ? find_held_lock+0x2b/0x80 [ 547.010979] ? __get_fs_type+0xe6/0x160 [ 547.010996] ? alloc_fs_context+0x58/0x9e0 [ 547.011012] ? alloc_fs_context+0x58/0x9e0 [ 547.011025] ? _raw_read_unlock+0x1e/0x40 [ 547.011037] alloc_fs_context+0x58/0x9e0 [ 547.011053] path_mount+0xd87/0x2120 [ 547.011070] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 547.011084] ? __pfx_path_mount+0x10/0x10 [ 547.011103] ? kmem_cache_free+0x2a4/0x540 [ 547.011116] ? putname.part.0+0x11b/0x160 [ 547.011135] ? getname_flags.part.0+0x1c6/0x540 [ 547.011148] ? putname.part.0+0x11b/0x160 [ 547.011167] __x64_sys_mount+0x293/0x310 [ 547.011182] ? __pfx___x64_sys_mount+0x10/0x10 [ 547.011202] do_syscall_64+0xbf/0x390 [ 547.011218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.011231] RIP: 0033:0x7fc4b82d004a [ 547.011240] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 547.011251] RSP: 002b:00007fc4b5843fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 547.011263] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b82d004a [ 547.011270] RDX: 0000000020000000 RSI: 0000000020000280 RDI: 0000000000000000 [ 547.011277] RBP: 00007fc4b5844040 R08: 00007fc4b5844040 R09: 0000000020000000 [ 547.011285] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 547.011292] R13: 0000000020000280 R14: 00007fc4b5844000 R15: 0000000020000580 [ 547.011307] [ 547.027690] FAULT_INJECTION: forcing a failure. [ 547.027690] name failslab, interval 1, probability 0, space 0, times 0 [ 547.028690] CPU: 0 UID: 0 PID: 5927 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 547.028706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 547.028712] Call Trace: [ 547.028716] [ 547.028720] dump_stack_lvl+0xfa/0x120 [ 547.028736] should_fail_ex+0x4d7/0x5e0 [ 547.028756] ? shmem_alloc_inode+0x27/0x50 [ 547.028772] should_failslab+0xc2/0x120 [ 547.028789] kmem_cache_alloc_lru_noprof+0x76/0x680 [ 547.028807] ? shmem_alloc_inode+0x27/0x50 [ 547.028821] shmem_alloc_inode+0x27/0x50 [ 547.028836] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 547.028851] alloc_inode+0x67/0x250 [ 547.028870] new_inode+0x1e/0x160 [ 547.028889] __shmem_get_inode+0x17c/0xe80 [ 547.028910] __shmem_file_setup+0x107/0x370 [ 547.028930] alloc_file+0x11c/0x500 [ 547.028944] __x64_sys_memfd_create+0x193/0x280 [ 547.028959] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 547.028977] do_syscall_64+0xbf/0x390 [ 547.028994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.029006] RIP: 0033:0x7fb50750ab19 [ 547.029014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 547.029026] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 547.029038] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750ab19 [ 547.029046] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fb5075640fb [ 547.029053] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 547.029061] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 547.029068] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000180 [ 547.029083] 03:50:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x0, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:50:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 5) 03:50:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 40) [ 547.143053] 9pnet_fd: Insufficient options for proto=fd 03:50:47 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd7}, "4d89b61fe271b7a4de55895104871b00945a5c6fae75433308477270a9eca10dbdeae8e4632dcacf54fe94b86f5b1910c1a4a20f4d4105a29667915d5101c9373ccdfc4b5ebd9b043871be04cb2d7bd7679e5caa52da3b60d981fd34773237b3192494d5ad0e6da9a2ed04741d7f87d9ee24aacc788134f2f15ca1c8464f3bf56483bc956c4f700b3f9c28fcba9b9285a086074eeba2a64991c49c15364506e8054b512827c8f06b6f6acf0fecdc1793da3477fbe8e976386ce50614834f3762af0b3f7ebebd1be3261e0f12675a00a73bb46d9261cb01"}, 0xdb) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c94052004e0001080c0605006e00ff7f07013f0200ff7f10ff040000b00100060904007f0016fbb1765d3b33455700060204004000c0ff0c060500030000084479f5855791546c5743c28d0e3f030009001f04040b00e0ff04000501000202810094fe74be5c0d93c320d5190f558045fd3ec69b8562ff1b3f43970e34a505d38bb8c0a35fff00738b8b91323fef7861e3d431c7f5f0a75e84a36d2086c3e68299f28bb6b694e50b45b3d557284466f3e59b8d932725748ef77bac5ec1ab3f6ebf4864f649711d551cacf71330cecfd3879f8e56de258147e51f12"], 0x57) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:50:47 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_set_cpb={{0x6}, {0x0, 0x7, 0x8001}}}}, 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x80}, "79c2b1e748a5cbc84de78d9e114d8cccd39bb88908062f3826568bbc0215412504b1d93cbe897edc40fcae98e67dc31316355cf9016c51fade44b02b624f13511a5c18bf2cc194685efc0ad1bdfb7d4a05d3f6e9dcafed774185ed297177e79516776e1b8c24dc747309741760beb05427774321c209c13be5a1d8b63b5d0466"}, 0x84) [ 547.213276] No source specified [ 547.217061] loop4: detected capacity change from 0 to 4 [ 547.244556] EXT4-fs: Mount option(s) incompatible with ext2 03:50:47 executing program 6: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000540)={'syztnl0\x00', r2, 0x1, 0x40, 0x2, 0x9, {{0x1c, 0x4, 0x3, 0x9, 0x70, 0x64, 0x0, 0x2, 0x4, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0x14, 0x2e, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@rand_addr=0x64010100, 0x1}]}, @timestamp={0x44, 0x28, 0x5a, 0x0, 0x2, [0x100, 0x4, 0x3, 0x3, 0x7fff, 0xbf, 0x7fffffff, 0x9f, 0xf01f]}, @timestamp_addr={0x44, 0x1c, 0xbe, 0x1, 0x1, [{@broadcast, 0x3}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x5fdfe2a7}]}, @noop]}}}}}) r3 = memfd_secret(0x80000) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000040)={0xfff, 0xb1b, 0xe9, &(0x7f00000000c0)="9ca797195c9f72ca209b033d1246aaa88375abd13e1bb325dd4a7fb855ba4c05fba23e711226b04785dbfc9a55b798113e4e0588c155c7cc326f02bf191545b04eee0d35717c5a4b9d0456cd44407db85aa13921b71b89d82917090978515005123b109e01aec590f5a657c56a5ea94a5d0100d74fbba932f00c63d5cef9062a11455d6bb180d78bafb424c0ac2a736d49d91b52fe70b45fc25985a88145e5cf5cf2f5c575c5a864c97012080e6123612fc2d5ee704b7668127492eac036e66ce1166f9c76b09bf15b13af492e720ad55d0d2828bd3e94ac4e8089dac4cf35bd34e0a5aeed2834ee22"}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04020044200040e409050006"], 0xd) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:50:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 41) [ 547.370705] FAULT_INJECTION: forcing a failure. [ 547.370705] name failslab, interval 1, probability 0, space 0, times 0 [ 547.371769] CPU: 0 UID: 0 PID: 5953 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 547.371787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 547.371794] Call Trace: [ 547.371799] [ 547.371803] dump_stack_lvl+0xfa/0x120 [ 547.371829] should_fail_ex+0x4d7/0x5e0 [ 547.371851] should_failslab+0xc2/0x120 [ 547.371870] __kmalloc_cache_noprof+0x73/0x6a0 [ 547.371883] ? __create_object+0x59/0x80 [ 547.371903] ? fat_init_fs_context+0x51/0x5e0 [ 547.371918] ? trace_kmalloc+0x1f/0xb0 [ 547.371937] ? fat_init_fs_context+0x51/0x5e0 [ 547.371949] fat_init_fs_context+0x51/0x5e0 [ 547.371963] msdos_init_fs_context+0x19/0x70 [ 547.371979] ? __pfx_msdos_init_fs_context+0x10/0x10 [ 547.371995] alloc_fs_context+0x570/0x9e0 [ 547.372014] path_mount+0xd87/0x2120 [ 547.372031] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 547.372046] ? __pfx_path_mount+0x10/0x10 [ 547.372062] ? kmem_cache_free+0x2a4/0x540 [ 547.372075] ? putname.part.0+0x11b/0x160 [ 547.372095] ? getname_flags.part.0+0x1c6/0x540 [ 547.372112] ? putname.part.0+0x11b/0x160 [ 547.372133] __x64_sys_mount+0x293/0x310 [ 547.372149] ? __pfx___x64_sys_mount+0x10/0x10 [ 547.372170] do_syscall_64+0xbf/0x390 [ 547.372187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.372200] RIP: 0033:0x7fc4b82d004a [ 547.372210] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 547.372222] RSP: 002b:00007fc4b5843fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 547.372234] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b82d004a [ 547.372242] RDX: 0000000020000000 RSI: 0000000020000280 RDI: 0000000000000000 [ 547.372250] RBP: 00007fc4b5844040 R08: 00007fc4b5844040 R09: 0000000020000000 [ 547.372258] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 547.372266] R13: 0000000020000280 R14: 00007fc4b5844000 R15: 0000000020000580 [ 547.372281] 03:50:56 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x158, 0x1, 0x2, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x200}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x200, 0x1002}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x9}}, @l2cap_move_chan_req={{0xe, 0xfd, 0x3}, {0x9, 0x80}}, @l2cap_conn_req={{0x2, 0x8, 0x4}, {0x8, 0x7f}}]}}, 0x2c) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:50:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 6) 03:50:56 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:50:56 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) 03:50:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 42) 03:50:56 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0000000000000700050006"], 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_rsp={{0xf, 0x81, 0x4}, {0x5}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:50:56 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:50:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x0, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 556.253906] No source specified [ 556.261224] FAULT_INJECTION: forcing a failure. [ 556.261224] name failslab, interval 1, probability 0, space 0, times 0 [ 556.263294] CPU: 1 UID: 0 PID: 5979 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 556.263326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 556.263339] Call Trace: [ 556.263347] [ 556.263356] dump_stack_lvl+0xfa/0x120 [ 556.263393] should_fail_ex+0x4d7/0x5e0 [ 556.263434] ? security_inode_alloc+0x3e/0x130 [ 556.263471] should_failslab+0xc2/0x120 [ 556.263504] kmem_cache_alloc_noprof+0x72/0x680 [ 556.263528] ? __pfx_map_id_range_down+0x10/0x10 [ 556.263565] ? security_inode_alloc+0x3e/0x130 [ 556.263600] security_inode_alloc+0x3e/0x130 [ 556.263638] inode_init_always_gfp+0xc94/0xff0 [ 556.263673] alloc_inode+0x8d/0x250 [ 556.263709] new_inode+0x1e/0x160 [ 556.263745] __shmem_get_inode+0x17c/0xe80 [ 556.263786] __shmem_file_setup+0x107/0x370 [ 556.263826] alloc_file+0x11c/0x500 [ 556.263852] __x64_sys_memfd_create+0x193/0x280 [ 556.263880] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 556.263916] do_syscall_64+0xbf/0x390 [ 556.263952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.263976] RIP: 0033:0x7fb50750ab19 [ 556.263994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 556.264016] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 556.264039] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750ab19 [ 556.264055] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fb5075640fb [ 556.264069] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 556.264083] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 556.264105] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000180 [ 556.264135] [ 556.330937] 9pnet_fd: Insufficient options for proto=fd 03:50:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) (fail_nth: 43) 03:50:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x0, 0x80) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:50:56 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040), &(0x7f0000000100), 0x2, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9a0ae920800050016e06205a876f63badc8810c810400950040407701fc5c07b2122b389b33b84c4a1f01292d0dd6d7ce6f233be6b21a953fee688ff6c5aec4c55c10b944cbac1f4c98a7fed7ff8cb65c2395d1f6ada2aa16b578c0a260fb75b94ef0ec0056a7e4620dffa14db61f01b1208a7824c3cef2748d6c5f6b7581ab9fd26f31e8ef08df7ff6d169937541be65e57f723340a3a67b304ed17473c5a0332addd3465b6069a632f6337be6010f2dd36511f58966c70e500e630a2590cb0b0f04c23285ec7e5431a6fe8b9e3bffbc"], 0x11) 03:50:56 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="e7ba886529bda400"/20], 0xd) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x8, 0x2}, {0x5}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x5, 0xc8, 0xe, 0x8, 0x5, 0x8}}}, 0xc) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb4}, "adf7f0be1e277a40bc3661e03f411b99b27a184ea45f55113a2f4c80136c3068ff2bba5ecfdcbb3ae5c12feb67916fe137bbf993ba2ad49475bd991662f9ceef96d70dba09e63e1c4f84d2fe4e13163d5081e17c5c0a8e01ad3f4ba569f9c980f5a0cf4cdd76e703811a343598f3f0cedc6c4b4e2674f49f83cf06ef3a5a5ba8a924fae97b6010e7ee8a14d3771e34305c8ea3133dd4b3312e1cd7cc1211d10d11102c57395eb97f4b0d242eb6d82ce9fa8f3e2b"}, 0xb8) 03:50:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 7) [ 556.552950] No source specified [ 556.564453] FAULT_INJECTION: forcing a failure. [ 556.564453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.566752] CPU: 1 UID: 0 PID: 5986 Comm: syz-executor.5 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 556.566786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 556.566800] Call Trace: [ 556.566809] [ 556.566818] dump_stack_lvl+0xfa/0x120 [ 556.566858] should_fail_ex+0x4d7/0x5e0 [ 556.566901] _copy_to_user+0x32/0xd0 [ 556.566928] simple_read_from_buffer+0xe0/0x180 [ 556.566957] proc_fail_nth_read+0x18a/0x240 [ 556.566992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 556.567026] ? security_file_permission+0x22/0x90 [ 556.567057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 556.567090] vfs_read+0x1eb/0xc70 [ 556.567135] ? __pfx_vfs_read+0x10/0x10 [ 556.567166] ? lock_release+0xc8/0x290 [ 556.567200] ? __fget_files+0x20d/0x3b0 [ 556.567240] ksys_read+0x121/0x240 [ 556.567269] ? __pfx_ksys_read+0x10/0x10 [ 556.567309] do_syscall_64+0xbf/0x390 [ 556.567344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.567370] RIP: 0033:0x7fc4b828169c [ 556.567388] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 556.567412] RSP: 002b:00007fc4b5844170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 556.567435] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fc4b828169c [ 556.567452] RDX: 000000000000000f RSI: 00007fc4b58441e0 RDI: 0000000000000003 [ 556.567467] RBP: 00007fc4b58441d0 R08: 0000000000000000 R09: 0000000020000000 [ 556.567483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.567497] R13: 00007ffda1e3835f R14: 00007fc4b5844300 R15: 0000000000022000 [ 556.567530] 03:50:56 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 556.763693] loop4: detected capacity change from 0 to 4 [ 556.797952] EXT4-fs: Mount option(s) incompatible with ext2 03:50:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:50:57 executing program 6: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0xac, 0x8, 0x6, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x8, 0x7800, 0x3, 0x8}}) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x80400) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x2f, 0x2, 0xff, 0x6f, 0x2, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1a}, 0x7, 0x20, 0x3ff, 0x10001}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r6, 0x1, 0x0, 0x0, {0xf}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x20000100) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:50:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:50:57 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@audit}, {@subj_role={'subj_role', 0x3d, 'trans=fd,'}}]}}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8, 0x4367b0c4d0fb0fe0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) dup2(r1, r2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x60000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}, {@posixacl}, {@privport}, {@privport}]}}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000100)=""/157, 0x9d}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 557.137676] No source specified 03:51:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 8) 03:51:07 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:07 executing program 2: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xfffff0f0, 0x3ff, 0x74c9, 0x6, 0x7, "299fc5442f248ad6ddd5a39838c240917697ab"}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc8}}}, 0x4) 03:51:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:51:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/34, 0x22) 03:51:07 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0xff}}}, 0x4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x62}, @l2cap_cid_signaling={{0x5e}, [@l2cap_conf_req={{0x4, 0xc0, 0xc}, {0x319, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0xff}, @l2cap_conf_flushto={0x2, 0x2, 0x7}]}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0x1, 0x5, 0x6, 0x1}}, @l2cap_conf_req={{0x4, 0xb8, 0x2d}, {0x3, 0x8, [@l2cap_conf_ews={0x7, 0x2, 0x400}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x6, 0x2, 0x0, 0x4ab}}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_ews={0x7, 0x2, 0x6}]}}, @l2cap_move_chan_rsp={{0xf, 0xff, 0x4}, {0xfff7, 0x3}}, @l2cap_create_chan_req={{0xc, 0xf9, 0x5}, {0x101, 0x7fff}}]}}, 0x67) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:51:07 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) 03:51:07 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:07 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0a0060208140e409050006c6706b920cb27b0ecf354c0abdcb0e88309b6eae232f2a4da3aaf5d52e400bac2214c02760f70a3666508062c7e6adcedc66867419c9d1a2b1513eef5ae1d3a37a583f27f4a8555942449869fc1fa7527e64abdd83bd8e058654c70ef88e7cbb4cf771165589c2f30d03901ae0a04c75a85addccb2824e53cf4451d59165b6fe163d9bf3b22a87934b55cf1ec8d0a0a6f86062b3b39b6b403b083ad2a9f2b0"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "d1373b8518626741ef5ba6acfdf4a22ca6622042dba96cf72539753225b5d8875bca4d12f992a0732f23f84989b3e928055b68b10cc7bf3e13cb540ab280072608e6f1ee0c4f0b4da194b88a27478ae4f0d7b3b652173d29155410354b052af2b8c501df8e72f583327101fdd4902c3eaa3374ee46080dc0fff63f1f3f5e40e8adabb51f8111011d812ee45c07acf232c14126f132146b532057aeb20e9eabbd3fbdf1f45d5e57ccab9576c530cd83d5ab89fecfb0b68ae34e6eeb032159abd787de3ea4da18fc31ec2e295709ce62470d58f42fc222cf04e07be36c84c465a6c5837ff3e0f36585075494734615888327284d5c2e4ebbbf"}}}, 0x102) syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaf}, "055d2e3d56f14e50d38f942b4889a87c48e23cd04f07dac154aff4b5f0872c7ffe5cbe378b6fc0a98bb2e35d9867c8b06844d0caf0aaec669dc3719ba3ba479a6931c3054a99089cab083161e026e4980553f7c4658d18aa71b97871217f32a3bd32eeabb8c03911c816e9ee1e2524d4eeecc08d1f8d2ade614bc56b65fdbb922facb34a22f19c607fb83fa30db63925018681bd805c70f60a078dd1ce4e30533266e864004bf98777771df670b0cd"}, 0xb3) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe0}, "8c7f09d956a78bed0b9e2431291c459562f9698d1c1d90554e340d1b37f10e748a22ebb354e2d15d013ed092f85796b7140068008f9c00684918d5cc8fa85cfd3fc612c80d5198eae9cbbadd387ebc6fdffff603d9577b3fe726d269e3b1315e743fcf68e3791eb56e53a7f845b5e3f3e2699f2ce3221b55eb9d8eb86fd4dadd88acf02e6d88a194794d856150abdbbddc602abb7302744d7bee90218d866096abc3f52df3149f2b65c97d7d7721f2fa86dea9f441e8b47830f16ed5b5a97592965f9c61605c7b8dfbb2dc418eb4752a2681f0f9edd5608f7ed2f41aeab652c3"}, 0xe4) [ 567.418909] No source specified [ 567.421529] No source specified 03:51:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 567.455344] FAULT_INJECTION: forcing a failure. [ 567.455344] name failslab, interval 1, probability 0, space 0, times 0 [ 567.457211] CPU: 1 UID: 0 PID: 6033 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 567.457240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 567.457252] Call Trace: [ 567.457260] [ 567.457267] dump_stack_lvl+0xfa/0x120 [ 567.457301] should_fail_ex+0x4d7/0x5e0 [ 567.457338] ? __d_alloc+0x31/0xa10 [ 567.457365] should_failslab+0xc2/0x120 [ 567.457394] kmem_cache_alloc_lru_noprof+0x76/0x680 [ 567.457418] ? find_held_lock+0x2b/0x80 [ 567.457457] ? __d_alloc+0x31/0xa10 [ 567.457482] __d_alloc+0x31/0xa10 [ 567.457508] ? mpol_shared_policy_init+0x24f/0x390 [ 567.457538] d_alloc_pseudo+0x1d/0xc0 [ 567.457558] alloc_file_pseudo+0xbe/0x220 [ 567.457594] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 567.457627] ? __shmem_get_inode+0x682/0xe80 [ 567.457663] __shmem_file_setup+0x1a7/0x370 [ 567.457698] alloc_file+0x11c/0x500 [ 567.457734] __x64_sys_memfd_create+0x193/0x280 [ 567.457759] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 567.457791] do_syscall_64+0xbf/0x390 [ 567.457821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.457842] RIP: 0033:0x7fb50750ab19 03:51:07 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 567.457859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 567.457878] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 567.457899] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750ab19 [ 567.457913] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fb5075640fb [ 567.457926] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 567.457939] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 567.457951] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000180 [ 567.457981] 03:51:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 9) [ 567.544504] No source specified [ 567.547726] No source specified 03:51:07 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x4d, 0xfff}}, @l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x8, 0x1}}, @l2cap_conf_rsp={{0x5, 0x4, 0xd}, {0x5, 0x2, 0xd8, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_rsp={{0x7, 0x49, 0x4}, {0x6, 0x20}}]}}, 0x32) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e06120000c90060"], 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:51:07 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:51:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/34, 0x22) [ 567.609671] 9pnet_fd: Insufficient options for proto=fd [ 567.657800] loop4: detected capacity change from 0 to 4 [ 567.661517] No source specified [ 567.669167] EXT4-fs: Mount option(s) incompatible with ext2 [ 567.669175] No source specified 03:51:19 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:51:19 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) 03:51:19 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:19 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) 03:51:19 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/34, 0x22) 03:51:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 10) 03:51:19 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:19 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x3}, {0x5}}}}, 0xd) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8}, "8ead4a5e9b5af95efcc54eda9e619b574fd47672fc45f5d63b98d1c6ad6d3584f5abddb5f057958c17c54d717ea96cdbc5050acfdfd087b28d6fa4333f2c25e57a173cc5a073c4b752181801ce2fa9d4a33b482c06999ee761260efa"}, 0xfffffff7) [ 579.729706] No source specified [ 579.735547] No source specified [ 579.747056] FAULT_INJECTION: forcing a failure. [ 579.747056] name failslab, interval 1, probability 0, space 0, times 0 [ 579.748852] CPU: 1 UID: 0 PID: 6080 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 579.748884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 579.748897] Call Trace: [ 579.748906] [ 579.748915] dump_stack_lvl+0xfa/0x120 [ 579.748953] should_fail_ex+0x4d7/0x5e0 [ 579.748995] ? alloc_empty_file+0x58/0x1e0 [ 579.749033] should_failslab+0xc2/0x120 [ 579.749068] kmem_cache_alloc_noprof+0x72/0x680 [ 579.749093] ? d_instantiate+0x79/0xa0 [ 579.749139] ? alloc_empty_file+0x58/0x1e0 [ 579.749174] alloc_empty_file+0x58/0x1e0 [ 579.749214] alloc_file_pseudo+0x12b/0x220 [ 579.749254] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 579.749302] __shmem_file_setup+0x1a7/0x370 [ 579.749343] alloc_file+0x11c/0x500 [ 579.749370] __x64_sys_memfd_create+0x193/0x280 [ 579.749398] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 579.749435] do_syscall_64+0xbf/0x390 [ 579.749469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.749494] RIP: 0033:0x7fb50750ab19 [ 579.749512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 579.749535] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 579.749559] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750ab19 [ 579.749575] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fb5075640fb [ 579.749590] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 579.749604] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 579.749619] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000180 [ 579.749649] 03:51:20 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc5}, "afc3c896e89390771348b6d4bcc5f97fb54cb1527f8e2fe107db1f45de15688eae5170250b6a7f41416449d4bd1c3edce4439c2dca95d67331f1826a66b15300ee55ac0decfe3f7c80ccce13ea2ac7c754a6cee92baf8d80bc2937b645c7154ceb3bbde384170d6ee243b779438e258860f9a4c2592f4550d3dabb4ccbeb29c8f7a821d06e99c06c9263fbe8b0c5970411e50917d27752e4bcb476782dbcf9a5fb00bdfda2f9c36866a92eb05cc187c7963e0ce5c8e655e6e2bb4423e58c596987771db005"}, 0xc9) 03:51:20 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x4, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:51:20 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:51:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, 0x0, 0x0) [ 579.900576] 9pnet_fd: Insufficient options for proto=fd [ 579.920434] No source specified [ 579.922735] No source specified 03:51:20 executing program 2: lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={0x0, 0xfb, 0xbb, 0x0, 0xff, "5ecb375a5582c9f322758266a5cd28fd", "eae685928631b44338eb27e0155299f5cd727b2992ae32d4ea9c020e8b4021c0d607c43148ab9d1b84f44489cb42794ae986872e33919018247350f0fc63b0612edbd4dcd6b40339151655585831bfc7252a69004a56053fa4cb99c78a5494f4c7dabe5aa399fd72580f5f53ddc35689498c573230dde9163d022a2b9622a9b7943d3055e2396f3dcef9254982006f4a3e7cdd0c15c82e24e277b34d4156df298a70fe5134d2"}, 0xbb, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x26}, "697b5a2688f8646b693b001217678a47a948eda14fd3ab2a66b7c04580f95edb4655bcd8a979"}, 0x2a) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0xfd, 0xa}, {0x1, 0x3, 0xad3, 0x1, [0x9]}}}}, 0x17) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0) statx(r0, &(0x7f0000000280)='./file0\x00', 0x100, 0x8, &(0x7f00000002c0)) 03:51:20 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf0}, "79a69a00d494d6b5c75e54589ecf12397de3e460d86914dd00a048125b97c3c8f1f964b3d2749bd4c20efccd55c62dc5e2efa28c8a534f6328ca9b04d365ccea3ee0eb8f5a980c3d857d43dd7026734de030e163c20d929b53f85a9f2c0523cfd41360a1352cff16bbcd60747da7ab4a708e32734f0a0a72e3790c275e7e3001fe43c4080c625fc485b772373746cdb02e6300ef94b6692e4064d97578db73e089e667ede65b7da2877611099473038f59fec24465d5ed0cf19325d92220a38260803d3c64dfa0fe729ca3099b6717ff9ea20a52432678245480e5d154c53e26b833a564f262ad44a03ad103d77100ee"}, 0xf4) 03:51:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 11) 03:51:20 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:20 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) [ 580.075364] loop4: detected capacity change from 0 to 4 [ 580.099625] EXT4-fs: Mount option(s) incompatible with ext2 [ 580.230679] 9pnet_fd: Insufficient options for proto=fd 03:51:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, 0x0, 0x0) 03:51:30 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:51:30 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) 03:51:30 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:30 executing program 2: recvfrom$packet(0xffffffffffffffff, &(0x7f0000002140)=""/70, 0x46, 0x2000, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000001100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) 03:51:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 12) 03:51:30 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:30 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x500000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) ioctl$FICLONE(r0, 0x40049409, r2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 590.683887] No source specified [ 590.690197] No source specified [ 590.695621] FAULT_INJECTION: forcing a failure. [ 590.695621] name failslab, interval 1, probability 0, space 0, times 0 [ 590.697431] CPU: 1 UID: 0 PID: 6131 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 590.697463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 590.697477] Call Trace: [ 590.697486] [ 590.697495] dump_stack_lvl+0xfa/0x120 [ 590.697534] should_fail_ex+0x4d7/0x5e0 [ 590.697575] ? security_file_alloc+0x35/0x130 [ 590.697602] should_failslab+0xc2/0x120 [ 590.697637] kmem_cache_alloc_noprof+0x72/0x680 [ 590.697663] ? __create_object+0x59/0x80 [ 590.697708] ? security_file_alloc+0x35/0x130 [ 590.697732] security_file_alloc+0x35/0x130 [ 590.697759] init_file+0x95/0x4c0 [ 590.697797] alloc_empty_file+0x76/0x1e0 [ 590.697836] alloc_file_pseudo+0x12b/0x220 [ 590.697877] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 590.697925] __shmem_file_setup+0x1a7/0x370 [ 590.697966] alloc_file+0x11c/0x500 [ 590.697993] __x64_sys_memfd_create+0x193/0x280 [ 590.698036] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 590.698073] do_syscall_64+0xbf/0x390 [ 590.698113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.698138] RIP: 0033:0x7fb50750ab19 [ 590.698156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 590.698179] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 590.698203] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750ab19 [ 590.698219] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fb5075640fb [ 590.698234] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 590.698249] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 590.698263] R13: 0000000020000140 R14: 0000000000000800 R15: 0000000020000180 [ 590.698294] 03:51:30 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:51:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:51:31 executing program 6: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 590.803085] 9pnet_fd: Insufficient options for proto=fd [ 590.816704] 9pnet_fd: Insufficient options for proto=fd 03:51:31 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, 0x0, 0x0) [ 590.857035] 9pnet_fd: Insufficient options for proto=fd 03:51:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 13) [ 590.953753] No source specified [ 590.968657] No source specified 03:51:31 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9d00a0006000500136902749907"], 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:51:31 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0a006020814038400500061de56aefcca1160ce2798834ec2d5122e067671b4962b9a5a5265977e953250e220f2a4625c10b4d8fb69cf569cf4f8540fd3f22382472e8c4cf1c5876162077f4fec82b5102000000000000000700724d07e8c8f294187e435e99103920ddf0e678a6b410aa3b721a2b6b5ecb172a52cd931726354b192a768a4c8518b9"], 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2c}, "3ae3526aa18d148604a78410ea5c301dfc883e92e5d53d2323fd8edc9ce9bc9dc0f94f88cab37dfe1758a0c0"}, 0x30) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c84000000400010007030000050007000a8100007f00027f0000d506ffff131e0e0bf268c37e17311df6ad4a89d00aa129d2ae2a80fdb6b70e2f086aec8ab3348749511b2163671fda44ffca7e7ad75587a5c0"], 0xfffffe0f) 03:51:31 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:31 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x8, 0x1ff}}}}, 0x11) [ 591.138869] loop4: detected capacity change from 0 to 4 [ 591.178388] EXT4-fs: Mount option(s) incompatible with ext2 03:51:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:51:41 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:41 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0477944c7e20fea4e4098fdedc824ac4f279c50b4e395ad4e9430fee9edef1b30cbb3b15c57e153f0035fc74ea"], 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfb}, "c7b535fd748ded30431e13b66f2ce53fe2356eafe9f6cf0d7d0d6b08710675dc8e72b7519c93eb27647df64e7a813588a0cf1dd08b078f3917ca27b4954edca56a54bc8a5829bc9569b6280adbbc8b2a7fdf0cf0ce7f9c4de3fcb5d1284388a5ae4502aa08e5aaac278ceee4265c2b793e32b2fd1f9d0d31b49df50c0f7f9a06fb43efb020c29fd0952e052211d0a0e6669bcb66528c213dc7d4345121518571227d03bba712ef9fa5e87e6345d1ad27a1aaaa1ae51961bb5966c9fb26a20f70909eecf21fe0eabc4fbf821fdeb4026a813a047c565456bfd89bd9eb6bc76c56fc8e5d6328051517d05c81a23178e642f232361cd58ff7fbd1648f"}, 0xff) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xeb}, "74230632167705f8c60eaec41aa0d88d66a4cec9e9c6144751daafdcc9aff4fd2a9fcff3952a55d9bb9aeeee0cff58970a4e7022f89ab0c348c90169533d91db399e47d5c6ccf762f943ede33cbe833f6a5a7826f423334119f2348d0a661d0793b6750771997f2aab4a128b3a4e0babae13dba884a0f492078bca6aa2176545af59c1076c0c0f4e8b80fed867a935ccf6e8f306fe3cd2cb80862694f1b3b9191e632bc76e0ca6b034342e30b71f2630bada159c08561b27a5ddb33d7a23f3efc83b65a75cdc0df50d255077f0a860945f9951d7201f4285cdfe3ae7ec364ea5ad4c549f557b385062e933"}, 0xef) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:51:41 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "e3b117", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6b}, "6c0f828028bdfc0219ee4e2775a6cfce4c626ea48307003fa48686a4fda3e2ce253dc324595fffbe9daa1113d005af90884d29331750069f06497f7f24b196d93a2dfd0edc6e2703df8a3dd38f7c0913725abde5f9b3b08a75ebc5574ef6a57449cc4ec9a19f476076d5df"}, 0x6f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:51:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 14) 03:51:41 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:41 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:41 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:41 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "9770871c5d84c0a65f04dd645bb9d2ad4ec45e0394c61b62b794485ca891bab3a44f6a346132136ad1a29a59e5f60164df59bde42f5c5eb8608e14582da2902545b86d8c512e0efa4cf55f7780a5f72780da4338cea80bfc6a53afa14b1a8aec635cd9b14366f7dac65a5aacf760f3415eb08bae0790dd7aa0d0602f27d811f6d001eacfd8795094b597f4e1bdde75cc4bf8178ba2fc42e169d2b2d938cd38b27418de72afe852dd8bb1f473d9f854749665a938"}, 0xb8) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "d3af60f03841d2306eabb1d6a2fbea2476cbf4baf080c8f32add546ed7b35c023567dae79d5c04dc5b102c5d68bd996c35562bcb6c1a64863d6fdf9bac8147d0dd8c5b45fa5f8c7f366683a26cc06fda5f8922835cf0b30612bdf7fefe10adaa0587d15adc1865fbb968948f8317d998a026eb8271f9232803d902bd86fcd3421d2ee7daf474e68e05fb83d3c3bef09ba73cade3c902e7ccffff7da1ef63af3415198ba4129de20c3d262695619c4957290a9cf02ac1b00cec4472de23a01336bff179ba3343d02de9e342ff16ed40b074"}, 0xd5) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1, 0xa}, {0xfff0, 0x149, 0x1, 0xffff, 0x5}}}}, 0x17) [ 600.905976] No source specified [ 600.911214] No source specified [ 600.928778] FAULT_INJECTION: forcing a failure. [ 600.928778] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 600.930856] CPU: 1 UID: 0 PID: 6179 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 600.930887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 600.930899] Call Trace: [ 600.930907] [ 600.930915] dump_stack_lvl+0xfa/0x120 [ 600.930952] should_fail_ex+0x4d7/0x5e0 [ 600.930992] should_fail_alloc_page+0xe0/0x110 [ 600.931027] prepare_alloc_pages+0x1af/0x500 [ 600.931063] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 600.931110] ? __is_insn_slot_addr+0x2e/0x290 [ 600.931149] ? __is_insn_slot_addr+0x136/0x290 [ 600.931184] ? lock_release+0xc8/0x290 [ 600.931216] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 600.931256] ? __lock_acquire+0x694/0x1b70 [ 600.931290] ? lock_is_held_type+0x9e/0x120 [ 600.931319] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 600.931350] ? policy_nodemask+0xeb/0x4e0 [ 600.931376] alloc_pages_mpol+0xed/0x340 [ 600.931399] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 600.931420] ? filemap_get_entry+0x1bb/0x3b0 [ 600.931444] ? __pfx_filemap_get_entry+0x10/0x10 [ 600.931465] ? __lock_acquire+0x694/0x1b70 [ 600.931497] folio_alloc_mpol_noprof+0x38/0x2a0 [ 600.931527] shmem_alloc_folio+0x11b/0x140 [ 600.931561] shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 [ 600.931610] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 600.931653] ? _raw_read_unlock+0x1e/0x40 [ 600.931675] ? simple_xattr_get+0x173/0x1d0 [ 600.931713] shmem_write_begin+0x147/0x2e0 [ 600.931737] ? __pfx_shmem_write_begin+0x10/0x10 [ 600.931757] ? timestamp_truncate+0x1eb/0x2f0 [ 600.931787] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 600.931815] ? __pfx_timestamp_truncate+0x10/0x10 [ 600.931850] generic_perform_write+0x391/0x810 [ 600.931893] ? __pfx_generic_perform_write+0x10/0x10 [ 600.931928] ? inode_needs_update_time.part.0+0x170/0x270 [ 600.931967] shmem_file_write_iter+0x111/0x140 [ 600.932000] vfs_write+0xbe9/0x1150 [ 600.932030] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 600.932061] ? __fget_files+0x34/0x3b0 [ 600.932087] ? __pfx_vfs_write+0x10/0x10 [ 600.932136] __x64_sys_pwrite64+0x1f1/0x260 [ 600.932173] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 600.932203] ? fput+0x6a/0x100 [ 600.932242] do_syscall_64+0xbf/0x390 [ 600.932274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.932297] RIP: 0033:0x7fb5074bdab7 [ 600.932315] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 600.932336] RSP: 002b:00007fb504a7ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 600.932358] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb5074bdab7 [ 600.932373] RDX: 0000000000000059 RSI: 0000000020010000 RDI: 0000000000000004 [ 600.932387] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 600.932400] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 600.932414] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 600.932444] [ 600.989687] 9pnet_fd: Insufficient options for proto=fd [ 600.998606] 9pnet_fd: Insufficient options for proto=fd [ 601.083497] loop4: detected capacity change from 0 to 4 [ 601.105863] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 03:51:52 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c8c010000c000000187f0800020081000000eff1b5d1bd87023465a9daa6c3d81fd7ddd4402690c5b4c6009353212bfc5342cee04c28b8d12bf0b4c2b3c8dc34ee5ca7e53fb5cee0da39b0077eb85c1e06c2cd5c09f2e345d6bd7c5df7651c50311ac257285a8c736744ce5bcd02a20ad8cde995718c0443420dc54d05443e8b9ebf088f91b520ddfed0741b96597f8f7c53c975020d020333a0"], 0x15) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:51:52 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x10, 0xff}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 15) 03:51:52 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x37, 0xc9, 0xc9, 0x81}}}, 0x8) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:51:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:51:52 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:52 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:52 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 612.099505] FAULT_INJECTION: forcing a failure. [ 612.099505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.100932] CPU: 0 UID: 0 PID: 6200 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 612.100956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.100965] Call Trace: [ 612.100972] [ 612.100979] dump_stack_lvl+0xfa/0x120 [ 612.101008] should_fail_ex+0x4d7/0x5e0 [ 612.101035] ? page_copy_sane+0xce/0x2b0 [ 612.101064] copy_folio_from_iter_atomic+0x3d3/0x18c0 [ 612.101090] ? simple_xattr_get+0x173/0x1d0 [ 612.101126] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 612.101146] ? shmem_write_begin+0x15e/0x2e0 [ 612.101164] ? __pfx_shmem_write_begin+0x10/0x10 [ 612.101179] ? timestamp_truncate+0x1eb/0x2f0 [ 612.101201] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 612.101223] ? __pfx_timestamp_truncate+0x10/0x10 [ 612.101249] generic_perform_write+0x1d7/0x810 [ 612.101282] ? __pfx_generic_perform_write+0x10/0x10 [ 612.101308] ? inode_needs_update_time.part.0+0x170/0x270 [ 612.101338] shmem_file_write_iter+0x111/0x140 [ 612.101363] vfs_write+0xbe9/0x1150 [ 612.101385] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 612.101409] ? __fget_files+0x34/0x3b0 [ 612.101427] ? __pfx_vfs_write+0x10/0x10 [ 612.101465] __x64_sys_pwrite64+0x1f1/0x260 [ 612.101488] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 612.101510] ? fput+0x6a/0x100 [ 612.101540] do_syscall_64+0xbf/0x390 [ 612.101564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.101582] RIP: 0033:0x7fb5074bdab7 [ 612.101595] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 612.101611] RSP: 002b:00007fb504a7ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 612.101628] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb5074bdab7 [ 612.101639] RDX: 0000000000000059 RSI: 0000000020010000 RDI: 0000000000000004 [ 612.101650] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 612.101660] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 612.101670] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 612.101692] [ 612.165372] No source specified [ 612.172051] No source specified 03:51:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 612.209976] loop4: detected capacity change from 0 to 4 [ 612.223168] EXT4-fs: Mount option(s) incompatible with ext2 03:51:52 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0401505d24de600e0a0060200040e409050006"], 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc1}, "725caabd73e14018a11b71b7838a47cb1b1df631a4c0ad9d3128e0a5bf057296acf3e93044e64524373ce2f1a5b535534a5f20b98a20751b449d8a4230f4691139ab52050d3cec9ff6b50b0cc0891293feeaf520c8cd2a2cc13be0e7a9773b1fa4cd94de268d6c8ed48e53e8e12f25459ba09b000571dbf3835d1b441fc13c46fb97dd1fae66c9d579c215933ed17cf8db0ea5961baf5844f5d4f3091fb7d03b9e5ec73b9a361007c1a29fa7495e64f11249a7a5a4de9000e5f55fe3f5a1cbd291"}, 0xc5) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:51:52 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc8}}}, 0x4) 03:51:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x500, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:51:52 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 612.300212] 9pnet_fd: Insufficient options for proto=fd 03:51:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 16) [ 612.316955] 9pnet_fd: Insufficient options for proto=fd [ 612.385034] FAULT_INJECTION: forcing a failure. [ 612.385034] name failslab, interval 1, probability 0, space 0, times 0 [ 612.386199] CPU: 0 UID: 0 PID: 6228 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 612.386218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.386227] Call Trace: [ 612.386232] [ 612.386238] dump_stack_lvl+0xfa/0x120 [ 612.386263] should_fail_ex+0x4d7/0x5e0 [ 612.386288] ? getname_flags.part.0+0x48/0x540 [ 612.386302] should_failslab+0xc2/0x120 [ 612.386332] kmem_cache_alloc_noprof+0x72/0x680 [ 612.386352] ? getname_flags.part.0+0x48/0x540 [ 612.386364] getname_flags.part.0+0x48/0x540 [ 612.386379] getname_flags+0x95/0xe0 [ 612.386396] do_sys_openat2+0x9f/0x1b0 [ 612.386409] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.386429] __x64_sys_openat+0x142/0x200 [ 612.386443] ? __pfx___x64_sys_openat+0x10/0x10 [ 612.386458] ? fput+0x6a/0x100 [ 612.386482] do_syscall_64+0xbf/0x390 [ 612.386501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.386517] RIP: 0033:0x7fb5074bda04 [ 612.386528] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 612.386541] RSP: 002b:00007fb504a7fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 612.386555] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb5074bda04 [ 612.386564] RDX: 0000000000000002 RSI: 00007fb504a80000 RDI: 00000000ffffff9c [ 612.386572] RBP: 00007fb504a80000 R08: 0000000000000000 R09: ffffffffffffffff [ 612.386581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 612.386589] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 612.386607] [ 612.410686] No source specified [ 612.421884] No source specified 03:51:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:51:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 17) 03:51:52 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "a115ccb7dcb53f9b"}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:51:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 612.577062] loop4: detected capacity change from 0 to 4 [ 612.604831] EXT4-fs: Mount option(s) incompatible with ext2 [ 612.624456] No source specified [ 612.632584] No source specified 03:52:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 18) 03:52:03 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) 03:52:03 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x7c}, @l2cap_cid_signaling={{0x78}, [@l2cap_move_chan_req={{0xe, 0x81, 0x3}, {0xd84, 0x9}}, @l2cap_info_req={{0xa, 0x7, 0x2}, {0x18}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x20, 0xef}}, @l2cap_conf_req={{0x4, 0x9, 0x32}, {0x8, 0x5, [@l2cap_conf_efs={0x6, 0x10, {0x3, 0x1, 0x7, 0x1f, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x9, 0x1, 0x40, 0x0, 0x9}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x80, 0x6, 0x86a, 0xfff, 0x4}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x2, 0x2}}, @l2cap_conf_rsp={{0x5, 0x7f, 0x14}, {0xa6, 0x7, 0x9, [@l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0x9930}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x1dc, 0xff}}]}}, 0x81) 03:52:03 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe1}, "ff0ae1a80223d0a79bf4d67711ae7abdd21175519891b276d3f9768d8d9b2e33b72c1db47cc20c81d2d255607a4ddef1e2e790cc3bd8d7454bf172d7eadbd043062165dced1ea5e3b17046122ff05a218740ad17fe8e9273edfc2ca0332e2cada7cb0a509625292945bf12b4fcec3bb5a89d14db2c6923215dcf43918d67070a4ad89715c551432ad30d8b4d72d9d1c902d5e6437730e1b8d0c8a9a0fa0029fb6d8b009b9b15aa6c0acc07c30099587164d1609857bc234e157cfe67ddba368673ba5592d324129df5c3e488862d0a8c3416cb6a6b42642e0703c8a2bb01de4e41"}, 0xe5) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:03 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x700, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:52:03 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 623.093771] FAULT_INJECTION: forcing a failure. [ 623.093771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.095658] CPU: 1 UID: 0 PID: 6262 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 623.095687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 623.095699] Call Trace: [ 623.095706] [ 623.095714] dump_stack_lvl+0xfa/0x120 [ 623.095747] should_fail_ex+0x4d7/0x5e0 [ 623.095784] strncpy_from_user+0x3b/0x2f0 [ 623.095814] getname_flags.part.0+0x8d/0x540 [ 623.095838] getname_flags+0x95/0xe0 [ 623.095863] do_sys_openat2+0x9f/0x1b0 [ 623.095883] ? __pfx_do_sys_openat2+0x10/0x10 [ 623.095914] __x64_sys_openat+0x142/0x200 [ 623.095935] ? __pfx___x64_sys_openat+0x10/0x10 [ 623.095958] ? fput+0x6a/0x100 [ 623.095994] do_syscall_64+0xbf/0x390 [ 623.096023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.096045] RIP: 0033:0x7fb5074bda04 [ 623.096061] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 623.096081] RSP: 002b:00007fb504a7fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 623.096108] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb5074bda04 [ 623.096123] RDX: 0000000000000002 RSI: 00007fb504a80000 RDI: 00000000ffffff9c [ 623.096136] RBP: 00007fb504a80000 R08: 0000000000000000 R09: ffffffffffffffff [ 623.096149] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 623.096161] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 623.096188] [ 623.106089] No source specified [ 623.123548] No source specified 03:52:03 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "5bb825", 0x2}}}, 0xd) 03:52:03 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x3a, 0xc}, {0x20, 0x1, 0x9, 0x80, [0x3, 0xeef2]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xde}, "accf0cc835f4bf36349a9a5ec813d3ecb31a62b7447f556d108be34af1dfdde06addf05f3b4c22ae42d3eb872f17a938feb4ead1c118575166bfac82027ee591531569e52e6c51aa86faf46adbdbe7d272a8aba5682ff3d0fa765adb51548139a08a16fc39f2bc28bff07081c4f8fe5647af015129b144c104be985d4a9cc0495eb10fa77811d97fdd5f47be77af0afe05127034462fab5d7564c601e8c08814fafba701394a3e288050fc177cfaf0bee757292f60add275f61ee7de490425889a8c8c851a06d9d5f8854f7677a2f3442534badb3502bda6d4a0ae5a95ea"}, 0xe2) 03:52:03 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x8ef, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 623.229074] 9pnet_fd: Insufficient options for proto=fd 03:52:03 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) 03:52:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 19) 03:52:03 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x183}, @l2cap_cid_signaling={{0x17f}, [@l2cap_info_rsp={{0xb, 0x1, 0xef}, {0x5, 0x0, "15c4adf13ba37ad5d56636f2b1b4af8783ad87d91f960c46c0a15855802334ee92a39ba1e0378fc1c5655556bb59f9cc341f3facb638b79516082fcec40b21628a3cd48953c3936107adeeccff99875335fa387de4b4c389beaa7d306545731803e74c607516bfb17450d77f82a10db8f557b7907926c1389e6fd8329683df29f4829d970faeabe898a826e30510dc6462b5af13fa92c2a9d610718d22eea5cf409bfc1ab3c1b76b14ed886210c9f0a3e91d34be2472f26d860e4620f54aac9ae83f77437f4fa32d316bef71edb660471ae2d76a277f18ee1f7490fa0604ec427b8892a55fe047731a6f92"}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1000, 0x4}}, @l2cap_create_chan_req={{0xc, 0x3, 0x5}, {0x5, 0x1ff, 0x2}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0xfff9, 0x80, 0x6}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0x5, 0x7, 0x6, 0x9}}, @l2cap_conf_req={{0x4, 0x81, 0x4a}, {0x6, 0x5, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x800}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x2, 0x9, 0x6, 0x5703, 0xfffffff7}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x0, 0xa9, 0xfffd, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x5200}, @l2cap_conf_efs={0x6, 0x10, {0x1, 0x2, 0x0, 0x1, 0xfffff001, 0x933}}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x9}]}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x8, 0x8}}, @l2cap_conn_req={{0x2, 0x5f, 0x4}, {0x7f, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x3, 0x4}, {0x8, 0x67df}}]}}, 0x188) 03:52:03 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) [ 623.332920] FAULT_INJECTION: forcing a failure. [ 623.332920] name failslab, interval 1, probability 0, space 0, times 0 [ 623.333953] CPU: 0 UID: 0 PID: 6284 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 623.333970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 623.333977] Call Trace: [ 623.333982] [ 623.333986] dump_stack_lvl+0xfa/0x120 [ 623.334011] should_fail_ex+0x4d7/0x5e0 [ 623.334034] ? alloc_empty_file+0x58/0x1e0 [ 623.334054] should_failslab+0xc2/0x120 [ 623.334072] kmem_cache_alloc_noprof+0x72/0x680 [ 623.334087] ? __is_insn_slot_addr+0x140/0x290 [ 623.334117] ? alloc_empty_file+0x58/0x1e0 [ 623.334135] alloc_empty_file+0x58/0x1e0 [ 623.334155] path_openat+0xe0/0x2880 [ 623.334176] ? __lock_acquire+0x694/0x1b70 [ 623.334192] ? __pfx_path_openat+0x10/0x10 [ 623.334211] do_filp_open+0x1e8/0x450 [ 623.334227] ? __pfx_do_filp_open+0x10/0x10 [ 623.334248] ? find_held_lock+0x2b/0x80 [ 623.334266] ? alloc_fd+0x2c1/0x560 [ 623.334280] ? lock_release+0xc8/0x290 [ 623.334296] ? _raw_spin_unlock+0x1e/0x40 [ 623.334309] ? alloc_fd+0x2c1/0x560 [ 623.334326] do_sys_openat2+0x104/0x1b0 [ 623.334339] ? __pfx_do_sys_openat2+0x10/0x10 [ 623.334356] __x64_sys_openat+0x142/0x200 [ 623.334368] ? __pfx___x64_sys_openat+0x10/0x10 [ 623.334382] ? fput+0x6a/0x100 [ 623.334403] do_syscall_64+0xbf/0x390 [ 623.334420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.334434] RIP: 0033:0x7fb5074bda04 [ 623.334444] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 623.334464] RSP: 002b:00007fb504a7fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 623.334476] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb5074bda04 [ 623.334485] RDX: 0000000000000002 RSI: 00007fb504a80000 RDI: 00000000ffffff9c [ 623.334493] RBP: 00007fb504a80000 R08: 0000000000000000 R09: ffffffffffffffff [ 623.334501] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 623.334508] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 623.334523] [ 623.352874] 9pnet_fd: Insufficient options for proto=fd [ 623.353875] No source specified [ 623.358350] No source specified 03:52:03 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) [ 623.422899] 9pnet_fd: Insufficient options for proto=fd 03:52:03 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x2, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:52:03 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:03 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) 03:52:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x1020, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:52:03 executing program 6: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0a006091c4f52a0dfdb54fef2120a55ae76b932faa2727f9f7478b18d1cfde795000273f66eb5e97cfd1c0c7fbaa2c3712926ea0b5aad563ff5bb0596390d7f066fc08c1add2db725d9f6d03000000000000005b5df5b39908898f9d7df941ca915939900c2b57c88c0929d7b46542665d0b371c65c31e45f486d7"], 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x3, 0x4}, {0x0, 0x8}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x7, 0xc9, {0x0, 0x7f2, 0x9fce, 0x100, 0x7}}}}, 0x17) [ 623.498680] 9pnet_fd: Insufficient options for proto=fd [ 623.611574] No source specified [ 623.614887] No source specified 03:52:14 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041c049959b873a3eff67c68c4b04945f184d58da58c"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:14 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:14 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:52:14 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 20) 03:52:14 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) 03:52:14 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) 03:52:14 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a006020005fbd1be8d100"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 633.976953] loop4: detected capacity change from 0 to 4 [ 633.979900] No source specified [ 633.988153] No source specified [ 633.996172] EXT4-fs: Mount option(s) incompatible with ext2 [ 634.138840] 9pnet_fd: Insufficient options for proto=fd 03:52:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x92}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4040801) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:25 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:25 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:25 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="050000"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 21) 03:52:25 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2010, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:52:25 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) 03:52:25 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:25 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) [ 645.637035] FAULT_INJECTION: forcing a failure. [ 645.637035] name failslab, interval 1, probability 0, space 0, times 0 [ 645.637990] CPU: 0 UID: 0 PID: 6354 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 645.638007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 645.638014] Call Trace: [ 645.638019] [ 645.638023] dump_stack_lvl+0xfa/0x120 [ 645.638047] should_fail_ex+0x4d7/0x5e0 [ 645.638069] ? security_file_alloc+0x35/0x130 [ 645.638083] should_failslab+0xc2/0x120 [ 645.638105] kmem_cache_alloc_noprof+0x72/0x680 [ 645.638118] ? __create_object+0x59/0x80 [ 645.638142] ? security_file_alloc+0x35/0x130 [ 645.638154] security_file_alloc+0x35/0x130 [ 645.638167] init_file+0x95/0x4c0 [ 645.638185] alloc_empty_file+0x76/0x1e0 [ 645.638204] path_openat+0xe0/0x2880 [ 645.638223] ? __lock_acquire+0x694/0x1b70 [ 645.638238] ? __pfx_path_openat+0x10/0x10 [ 645.638257] do_filp_open+0x1e8/0x450 [ 645.638271] ? __pfx_do_filp_open+0x10/0x10 [ 645.638291] ? find_held_lock+0x2b/0x80 [ 645.638308] ? alloc_fd+0x2c1/0x560 [ 645.638321] ? lock_release+0xc8/0x290 [ 645.638336] ? _raw_spin_unlock+0x1e/0x40 [ 645.638350] ? alloc_fd+0x2c1/0x560 [ 645.638369] do_sys_openat2+0x104/0x1b0 [ 645.638381] ? __pfx_do_sys_openat2+0x10/0x10 [ 645.638398] __x64_sys_openat+0x142/0x200 [ 645.638409] ? __pfx___x64_sys_openat+0x10/0x10 [ 645.638422] ? fput+0x6a/0x100 [ 645.638441] do_syscall_64+0xbf/0x390 [ 645.638458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.638471] RIP: 0033:0x7fb5074bda04 [ 645.638480] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 645.638491] RSP: 002b:00007fb504a7fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 645.638503] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb5074bda04 [ 645.638511] RDX: 0000000000000002 RSI: 00007fb504a80000 RDI: 00000000ffffff9c [ 645.638518] RBP: 00007fb504a80000 R08: 0000000000000000 R09: ffffffffffffffff [ 645.638526] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 645.638533] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 645.638547] [ 645.656570] No source specified [ 645.661514] No source specified 03:52:25 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a0060200040e418050006"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xedc0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 645.736748] 9pnet_fd: Insufficient options for proto=fd 03:52:26 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 22) 03:52:26 executing program 6: syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none, 0xf0}}}, 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:26 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:26 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 645.846555] No source specified [ 645.850273] No source specified [ 645.872054] FAULT_INJECTION: forcing a failure. [ 645.872054] name failslab, interval 1, probability 0, space 0, times 0 [ 645.873154] CPU: 0 UID: 0 PID: 6370 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 645.873172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 645.873179] Call Trace: [ 645.873184] [ 645.873189] dump_stack_lvl+0xfa/0x120 [ 645.873214] should_fail_ex+0x4d7/0x5e0 [ 645.873237] ? security_file_alloc+0x35/0x130 [ 645.873251] should_failslab+0xc2/0x120 [ 645.873270] kmem_cache_alloc_noprof+0x72/0x680 [ 645.873285] ? __create_object+0x59/0x80 [ 645.873310] ? security_file_alloc+0x35/0x130 [ 645.873323] security_file_alloc+0x35/0x130 [ 645.873336] init_file+0x95/0x4c0 [ 645.873356] alloc_empty_file+0x76/0x1e0 [ 645.873376] path_openat+0xe0/0x2880 [ 645.873397] ? __lock_acquire+0x694/0x1b70 [ 645.873412] ? __pfx_path_openat+0x10/0x10 [ 645.873432] do_filp_open+0x1e8/0x450 [ 645.873447] ? __pfx_do_filp_open+0x10/0x10 [ 645.873468] ? find_held_lock+0x2b/0x80 [ 645.873486] ? alloc_fd+0x2c1/0x560 [ 645.873501] ? lock_release+0xc8/0x290 [ 645.873517] ? _raw_spin_unlock+0x1e/0x40 [ 645.873529] ? alloc_fd+0x2c1/0x560 [ 645.873546] do_sys_openat2+0x104/0x1b0 [ 645.873558] ? __pfx_do_sys_openat2+0x10/0x10 [ 645.873576] __x64_sys_openat+0x142/0x200 [ 645.873588] ? __pfx___x64_sys_openat+0x10/0x10 [ 645.873602] ? fput+0x6a/0x100 [ 645.873622] do_syscall_64+0xbf/0x390 [ 645.873639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.873653] RIP: 0033:0x7fb5074bda04 [ 645.873663] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 645.873674] RSP: 002b:00007fb504a7fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 645.873686] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb5074bda04 [ 645.873695] RDX: 0000000000000002 RSI: 00007fb504a80000 RDI: 00000000ffffff9c [ 645.873702] RBP: 00007fb504a80000 R08: 0000000000000000 R09: ffffffffffffffff [ 645.873710] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 645.873718] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 645.873733] 03:52:26 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 646.003398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.009702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.051978] 9pnet_fd: Insufficient options for proto=fd [ 646.540641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.542143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:52:36 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:36 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:36 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0), 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:36 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 23) 03:52:36 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xef08, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:52:36 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:52:36 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a4a5f67e900005c130000"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 656.321476] FAULT_INJECTION: forcing a failure. [ 656.321476] name failslab, interval 1, probability 0, space 0, times 0 [ 656.323453] CPU: 1 UID: 0 PID: 6403 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 656.323484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 656.323496] Call Trace: [ 656.323504] [ 656.323512] dump_stack_lvl+0xfa/0x120 [ 656.323549] should_fail_ex+0x4d7/0x5e0 [ 656.323589] ? __kernfs_new_node+0xd3/0x870 [ 656.323621] should_failslab+0xc2/0x120 [ 656.323654] kmem_cache_alloc_noprof+0x72/0x680 [ 656.323680] ? __pfx_avc_has_perm+0x10/0x10 [ 656.323711] ? __kernfs_new_node+0xd3/0x870 [ 656.323743] __kernfs_new_node+0xd3/0x870 [ 656.323780] ? __pfx___kernfs_new_node+0x10/0x10 [ 656.323818] ? lock_acquire+0x15e/0x2f0 [ 656.323844] ? kernfs_root+0x23/0x2a0 [ 656.323876] ? find_held_lock+0x2b/0x80 [ 656.323910] ? kernfs_root+0xee/0x2a0 [ 656.323942] ? lock_release+0xc8/0x290 [ 656.323965] ? lock_is_held_type+0x9e/0x120 [ 656.323998] kernfs_new_node+0x13c/0x1e0 [ 656.324025] kernfs_create_dir_ns+0x4d/0x1a0 [ 656.324052] internal_create_group+0xa7f/0xeb0 [ 656.324087] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 656.324131] ? __pfx_internal_create_group+0x10/0x10 [ 656.324164] ? blk_validate_limits+0xc27/0x15c0 [ 656.324198] ? lock_is_held_type+0x9e/0x120 [ 656.324227] loop_configure+0xc42/0x1590 [ 656.324277] ? __pfx_loop_configure+0x10/0x10 [ 656.324319] ? avc_has_extended_perms+0x107/0xf20 [ 656.324345] ? find_held_lock+0x2b/0x80 [ 656.324379] ? avc_has_extended_perms+0x23b/0xf20 [ 656.324405] ? lock_release+0xc8/0x290 [ 656.324434] lo_ioctl+0x66d/0x1c70 [ 656.324464] ? __pfx_lo_ioctl+0x10/0x10 [ 656.324488] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 656.324523] ? lock_acquire+0x15e/0x2f0 [ 656.324549] ? __virt_addr_valid+0x1c6/0x5d0 [ 656.324586] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 656.324612] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 656.324635] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 656.324658] ? lock_release+0xc8/0x290 [ 656.324686] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 656.324746] ? __up_read+0x420/0x750 [ 656.324774] ? __fget_files+0x34/0x3b0 [ 656.324801] ? find_held_lock+0x2b/0x80 [ 656.324834] ? __fget_files+0x203/0x3b0 [ 656.324861] ? __pfx_lo_ioctl+0x10/0x10 [ 656.324886] blkdev_ioctl+0x27c/0x6d0 [ 656.324916] ? __pfx_blkdev_ioctl+0x10/0x10 [ 656.324945] ? selinux_file_ioctl+0xb9/0x280 [ 656.324982] ? __pfx_blkdev_ioctl+0x10/0x10 [ 656.325013] __x64_sys_ioctl+0x18f/0x210 [ 656.325038] do_syscall_64+0xbf/0x390 [ 656.325069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.325092] RIP: 0033:0x7fb50750a8d7 [ 656.325110] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 656.325132] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.325154] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb50750a8d7 [ 656.325169] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 656.325183] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 656.325196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 656.325210] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 656.325239] [ 656.379442] loop4: detected capacity change from 0 to 4 [ 656.389517] No source specified [ 656.390537] 9pnet_fd: Insufficient options for proto=fd [ 656.392990] No source specified [ 656.397230] 9pnet_fd: Insufficient options for proto=fd 03:52:36 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 656.435493] EXT4-fs: Mount option(s) incompatible with ext2 03:52:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:52:36 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:36 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03c800240f0a2e20bf5acd7c1fb7682494470000feb5959b7c09afea024553c698de6aeae62d5048"], 0x28) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 656.549246] 9pnet_fd: Insufficient options for proto=fd [ 656.552789] No source specified [ 656.556001] No source specified 03:52:36 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x0, 0xc9, 0xfc01, 0x4, 0xfff, 0x2}}}, 0xe) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 24) 03:52:36 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:52:36 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xe0ffff, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 656.659997] loop4: detected capacity change from 0 to 4 [ 656.682608] EXT4-fs: Mount option(s) incompatible with ext2 [ 656.885318] 9pnet_fd: Insufficient options for proto=fd [ 656.914413] No source specified [ 656.924318] No source specified 03:52:46 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="656e010100000000000000"]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) write(r6, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:46 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:52:46 executing program 2: ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0xfffffffffffffe71) 03:52:46 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:46 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:52:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 25) 03:52:46 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "2d15a32d5a4bcfd4aa5de4eec5a87501ff0467783132c4e4ddd8dd1f99bd1b5eab046ad4920b110a691051978e4ada9e24f98242be3a92d008fb67"}, 0x3f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:46 executing program 2: r0 = getpid() pidfd_open(r0, 0x0) r1 = getpid() pidfd_open(r1, 0x0) r2 = getpid() pidfd_open(r2, 0x0) r3 = gettid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xffffffffffffff88}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004800}, 0x5) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 666.359154] loop4: detected capacity change from 0 to 4 [ 666.370011] EXT4-fs: Mount option(s) incompatible with ext2 [ 666.373810] No source specified 03:52:46 executing program 6: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04a540007d491bcd01afb86bd5"], 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x6, 0x1, 0x5, 0x1ff}}]}}, 0x15) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmstat\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 666.383170] No source specified [ 666.389869] 9pnet_fd: Insufficient options for proto=fd 03:52:46 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:52:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 26) 03:52:46 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x8, 0x2, [{0xc8, 0x108}, {0xc9, 0x2, 0x2}]}}}, 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="03c9006ddac6784b59b7b23d05f680d89788e9145a895539028913d74f26396dc74b06c8bf2b855fe35884efd0346d3a9626c2f672f12370b38184c1c301c1d34004dd59d0c90cc1eaaed376b81f07993c28d878a8a059b273134329ba18ebe4808330e9f295ef2e4206f5c1915f847d4d075e9dd2ed760ac28d7ce7cf3b946d810416cc18d733ad801a1bdb395983a9935e13f95d9e77"], 0x71) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03c9004e4cce1f1ba834f5cab7543a0bf7eb9ef5e614ee99db0411b3035613156fa8e8551417ff6a2cdb218fb0f6b4506687ec809c5b22da93b26a41ed3f9b3d002a43333f8da88eb7e34b6210d85ff8733f"], 0x52) 03:52:46 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 666.565562] loop4: detected capacity change from 0 to 4 03:52:46 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 666.576640] EXT4-fs: Mount option(s) incompatible with ext2 [ 666.604606] No source specified [ 666.616339] No source specified 03:52:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:52:55 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0a0060d7d6b49963301f54e5ea58d764c172bfdaafa27b602ebf659daac54cb0ec62c02c0b874a53ffe5a35ad48c76654bf5a21ecce24a829f9dad912abf11da113101471ece81dea81e24f09d33c3cd28b86f528a0cccf635fc7a9031677820b2f356c75c79f57cc5f487230d47076c89c613db8ad5d45e5c0a97d26dedfb0d84a8545ec278e1d129aefc39858835b54cca1edaccba96bcbe6097c33854d519"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:55 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x1, 0xc8, {0xff, 0x1ff, 0x2, 0xffffffff, 0x4}}}}, 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 27) 03:52:55 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:55 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:52:55 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:52:55 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 675.740705] loop4: detected capacity change from 0 to 4 [ 675.744023] No source specified [ 675.752012] No source specified [ 675.756078] EXT4-fs: Mount option(s) incompatible with ext2 03:52:56 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04170a000f56091955fe7f0160288340e4090500d91f71ff471c4be8b53fd1a7bc2f1086a869b6bea97d4d17d45edaeb5f76654043d652b78031378165ad766d7067d98b625411da4b07ebe4c9634cbb6b0723cf1e4b61690c730d1f3454fa4d1c229d04c1a8917cf40f08d825864f0fbb3ec4d2bf26d79772a2c29d0329b999414d1d80f528dd884b5b346bd2661f48c9e65f4d73903e11aa58b7a111827e2ef85293de69fd510d7e0cc7c06a283991e5000000000000000000"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 28) 03:52:56 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:52:56 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x80120, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:52:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:52:56 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 675.899409] loop4: detected capacity change from 0 to 4 [ 675.911395] EXT4-fs: Mount option(s) incompatible with ext2 03:52:56 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xef) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) [ 675.983439] No source specified [ 675.987867] No source specified 03:53:06 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "faf403"}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf9}, "266f5863adf2b9dd9836cb51bea1a5097a37ca950fe7319f94af33ce75827da9870d84db267420830859ee8ea037d5c3d5260cb723e8b7be9b6a40baedd03bf540d76e2ba9d6c2b366fed6c32926c1ba7cafb6cf8f81a2733416cb9f60aba79aae439a3eee3f6c4cec58660526066900b109be2dc74d2b33348e5e4df96dd011db89a9e3c3ca47b0bed02cce5eaf03bfdc388b953602d21f42fc22918860cec78e04b909534b0be6e447f537826ae980b302cb00c8d16fb01779ae7a146047b4db57565e6b87d79d3cfc5ec070f56ec1fed7c5d582683725cdc6514eb5f7257895f5568a741f8b03fcf74b55a27c981749894be35561af571b"}, 0xfd) 03:53:06 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:06 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:53:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 29) 03:53:06 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:06 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x12) 03:53:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 686.551745] No source specified [ 686.554572] No source specified [ 686.609907] FAULT_INJECTION: forcing a failure. [ 686.609907] name failslab, interval 1, probability 0, space 0, times 0 [ 686.611261] CPU: 1 UID: 0 PID: 6550 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 686.611291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 686.611301] Call Trace: [ 686.611306] [ 686.611312] dump_stack_lvl+0xfa/0x120 [ 686.611340] should_fail_ex+0x4d7/0x5e0 [ 686.611369] ? __kernfs_new_node+0xd3/0x870 [ 686.611394] should_failslab+0xc2/0x120 [ 686.611418] kmem_cache_alloc_noprof+0x72/0x680 [ 686.611441] ? __kernfs_new_node+0xd3/0x870 [ 686.611464] __kernfs_new_node+0xd3/0x870 [ 686.611491] ? __pfx___kernfs_new_node+0x10/0x10 [ 686.611518] ? lock_acquire+0x15e/0x2f0 [ 686.611538] ? kernfs_root+0x23/0x2a0 [ 686.611561] ? find_held_lock+0x2b/0x80 [ 686.611586] ? kernfs_root+0xee/0x2a0 [ 686.611609] ? lock_release+0xc8/0x290 [ 686.611626] ? lock_is_held_type+0x9e/0x120 [ 686.611649] kernfs_new_node+0x13c/0x1e0 [ 686.611669] __kernfs_create_file+0x55/0x360 [ 686.611692] sysfs_add_file_mode_ns+0x21c/0x440 [ 686.611717] ? __pfx_dev_attr_store+0x10/0x10 [ 686.611739] internal_create_group+0x571/0xeb0 [ 686.611770] ? __pfx_internal_create_group+0x10/0x10 [ 686.611795] ? blk_validate_limits+0xc27/0x15c0 [ 686.611819] ? lock_is_held_type+0x9e/0x120 [ 686.611840] loop_configure+0xc42/0x1590 [ 686.611875] ? __pfx_loop_configure+0x10/0x10 [ 686.611904] ? avc_has_extended_perms+0x107/0xf20 [ 686.611925] ? find_held_lock+0x2b/0x80 [ 686.611949] ? avc_has_extended_perms+0x23b/0xf20 [ 686.611968] ? lock_release+0xc8/0x290 [ 686.611989] lo_ioctl+0x66d/0x1c70 [ 686.612010] ? __pfx_lo_ioctl+0x10/0x10 [ 686.612028] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 686.612053] ? lock_acquire+0x15e/0x2f0 [ 686.612071] ? __virt_addr_valid+0x1c6/0x5d0 [ 686.612104] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 686.612124] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 686.612140] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 686.612157] ? lock_release+0xc8/0x290 [ 686.612177] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 686.612219] ? __up_read+0x420/0x750 [ 686.612240] ? __fget_files+0x34/0x3b0 [ 686.612259] ? find_held_lock+0x2b/0x80 [ 686.612284] ? __fget_files+0x203/0x3b0 [ 686.612303] ? __pfx_lo_ioctl+0x10/0x10 [ 686.612321] blkdev_ioctl+0x27c/0x6d0 [ 686.612343] ? __pfx_blkdev_ioctl+0x10/0x10 [ 686.612364] ? selinux_file_ioctl+0xb9/0x280 [ 686.612391] ? __pfx_blkdev_ioctl+0x10/0x10 [ 686.612413] __x64_sys_ioctl+0x18f/0x210 [ 686.612431] do_syscall_64+0xbf/0x390 [ 686.612454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.612472] RIP: 0033:0x7fb50750a8d7 [ 686.612484] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.612500] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.612516] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb50750a8d7 [ 686.612527] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 686.612536] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 686.612546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 686.612556] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 686.612576] 03:53:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 686.671790] loop4: detected capacity change from 0 to 4 03:53:06 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{0x1}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x3, 0x9, 0x1f}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x10d, 0x9, 0x1, 0x6}}, @l2cap_move_chan_cfm={{0x10, 0xfa, 0x4}, {0x6, 0x7}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x7, 0x9b, 0x7ff, 0x59}}]}}, 0x32) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x25}, @l2cap_cid_signaling={{0x21}, [@l2cap_move_chan_req={{0xe, 0x97, 0x3}, {0x11, 0x69}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x0, 0x7fff, 0x4, 0x20}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x81, 0x2}, {0x5}}, @l2cap_move_chan_rsp={{0xf, 0x81, 0x4}, {0x1f, 0xa400}}]}}, 0x2a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x8, 0x2, [{0x1, 0x4, 0x1000}, {0xc8, 0x1, 0x100}]}}}, 0x12) 03:53:06 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0060208140e4099b23f3be6cf5cee98d4f590006b8ac8d45f42adf25a389b6a3b36fc6875cce1fd7da39bc340674466b99133d74db4e2cf5f548bf049dd9668d56cc15a52d101c74515c118077f50382509e9f0108925d43e6910a2c12696240e480b73d4a8d57e156b6194c7a9d2b08c39ee9e7d6c3a37cc6848bbe6a9c25b86680bebe4bc366154b673f340884810800000000000000682f14a3f8457fbdf8adb754a56ee9cbe06424a28cd75c162702f2738e9d4808022b8db054c57c47a88ef4d71a47d212b9ceb0d99f10380de18e39afff96da35c300c5200d31d4c2f332964dcebcea0587fb1ef454129a5fcbe71e73c5b3eb94babccd3a67c365604415b3b854176aab691d940409f4ea0b41b2"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe3}, "7df68391a0ac631e99f282311a4079c9f30de58590340b449b11caa615f56e8d75c3f21bd529dacdb689c34fcadee38380ba84920e6ca8aac67fa5fc6f8bc2b059f4b8c940726e4c3d5df27383bc4ebfe9cfb70be04f27f53bcaf548f415b820e772298f05b0d9a6edbc1ae7e8e2b5f530f5464ecc55d9e31b45bd0798298958414176160a38cbb8f9ac527116c31d1144a26a959fec0abad59994cc2714d5e916816add3a6c74cd875568a948ddb63c3d19b9131f6a50f33b6d39b5d5b71742801f9a35dda0665cfdcde877ab621937497ebf89558856ce7320664d02a6d20668b573"}, 0xe7) [ 686.746283] EXT4-fs: Mount option(s) incompatible with ext2 03:53:07 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4a}, "a4567b2e8f8f0fca03f8f61f5a16820849785696f371569c0e4e883c1f159d5367a7c656f799a13899681a426c54ed2757d646684b4b80fbf9c22f0caeacac39b7fb59c9eb04852f85b5"}, 0x4e) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) [ 686.819045] No source specified [ 686.844632] No source specified 03:53:07 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) write(r0, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:53:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 30) 03:53:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 686.926222] loop4: detected capacity change from 0 to 4 [ 686.934713] EXT4-fs: Mount option(s) incompatible with ext2 03:53:07 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000180)={0x3, 0x5, 0x3ff, 0x1, 0x3}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x4, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2a}, "d9352957fc86b05f3ac7945406d263527371540dec56e24d8e556eddd96deb5d47af51da8f9f3970720f"}, 0x2e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x6, 0xc9, 0x1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x48}, "b22018714edc731b4766fc6c8efb2c10ab0b8289b239419f79b2967fee6d91716ea6f30ae1f805656967153268ea1e9287007745eec4ad442cc847005d08b0b00d395a9a598f4a5f"}, 0x4c) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c8500c000800050006c3f16b770004003cd1fe164aa68d683860bb7582df08c5ec60fb9bc0b49c459bc68b8d36264aabde83fc1b0fa0e19933891e9b7594ff23c0c1782d7d0ff1da8d857f4078ed250893a17d81f628c99aae5b75f1311c86ff2b0fa0be4ae3c29b13010548414963a3afaca92098e67847a25ab5f944cdc2ebebab7e3bce66bf4c16fd8c2a"], 0x11) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x2, 0xc9, 0x7, 0x0, 0x1000, 0x1000}}}, 0xc) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x0, 0xc}, {0x800, 0xe21, 0x6, 0x7, [0x9, 0x401]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 687.044554] No source specified [ 687.052967] No source specified 03:53:17 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:17 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 31) 03:53:17 executing program 6: r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x49, 0x28482) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000000000000000000000000000f31851590900000002000000000000000200000000000000ff01000000000000d604412d000000000000080000000000000000000000000000ffffffff0000000001000000000000000700000000000000000000000000000000000000000000000400"/129]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) pidfd_getfd(0xffffffffffffffff, r2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe441, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000180)={0x1, 0x1, 0x5}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',nrtend,\x00']) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0)="1aa3a0dfe41cb36c852934fe494ae2198b3b80107924efe87270d0ff27d02a301603fbac603f7282992b5830d3faefebfae743a578c3a6f40759c33d60af9505e94e756b85d24ff99422", 0x4a, r4}, 0x68) 03:53:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:53:17 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x22}, @hci_rp_read_local_amp_info={{}, {0x0, 0x94, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x400, 0x4, 0x7fffffff, 0xff}}}}, 0x7c) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:53:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:53:17 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) write(r0, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 697.046832] No source specified [ 697.049732] No source specified 03:53:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:53:17 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) write(r0, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 697.095523] FAULT_INJECTION: forcing a failure. [ 697.095523] name failslab, interval 1, probability 0, space 0, times 0 [ 697.096691] CPU: 1 UID: 0 PID: 6596 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 697.096707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 697.096714] Call Trace: [ 697.096718] [ 697.096723] dump_stack_lvl+0xfa/0x120 [ 697.096744] should_fail_ex+0x4d7/0x5e0 [ 697.096765] ? __kernfs_new_node+0xd3/0x870 [ 697.096783] should_failslab+0xc2/0x120 [ 697.096800] kmem_cache_alloc_noprof+0x72/0x680 [ 697.096817] ? __kernfs_new_node+0xd3/0x870 [ 697.096833] __kernfs_new_node+0xd3/0x870 [ 697.096852] ? __pfx___kernfs_new_node+0x10/0x10 [ 697.096870] ? lock_acquire+0x15e/0x2f0 [ 697.096884] ? kernfs_root+0x23/0x2a0 [ 697.096901] ? find_held_lock+0x2b/0x80 [ 697.096918] ? kernfs_root+0xee/0x2a0 [ 697.096934] ? lock_release+0xc8/0x290 [ 697.096946] ? lock_is_held_type+0x9e/0x120 [ 697.096963] kernfs_new_node+0x13c/0x1e0 [ 697.096977] __kernfs_create_file+0x55/0x360 [ 697.096993] sysfs_add_file_mode_ns+0x21c/0x440 [ 697.097010] ? __pfx_dev_attr_store+0x10/0x10 [ 697.097027] internal_create_group+0x571/0xeb0 [ 697.097049] ? __pfx_internal_create_group+0x10/0x10 [ 697.097066] ? blk_validate_limits+0xc27/0x15c0 [ 697.097083] ? lock_is_held_type+0x9e/0x120 [ 697.097102] loop_configure+0xc42/0x1590 [ 697.097128] ? __pfx_loop_configure+0x10/0x10 [ 697.097149] ? avc_has_extended_perms+0x107/0xf20 [ 697.097164] ? find_held_lock+0x2b/0x80 [ 697.097180] ? avc_has_extended_perms+0x23b/0xf20 [ 697.097193] ? lock_release+0xc8/0x290 [ 697.097208] lo_ioctl+0x66d/0x1c70 [ 697.097223] ? __pfx_lo_ioctl+0x10/0x10 [ 697.097235] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 697.097253] ? lock_acquire+0x15e/0x2f0 [ 697.097266] ? __virt_addr_valid+0x1c6/0x5d0 [ 697.097285] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 697.097299] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 697.097310] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 697.097322] ? lock_release+0xc8/0x290 [ 697.097336] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 697.097367] ? __up_read+0x420/0x750 [ 697.097381] ? __fget_files+0x34/0x3b0 [ 697.097394] ? find_held_lock+0x2b/0x80 [ 697.097411] ? __fget_files+0x203/0x3b0 [ 697.097424] ? __pfx_lo_ioctl+0x10/0x10 [ 697.097437] blkdev_ioctl+0x27c/0x6d0 [ 697.097452] ? __pfx_blkdev_ioctl+0x10/0x10 [ 697.097467] ? selinux_file_ioctl+0xb9/0x280 [ 697.097486] ? __pfx_blkdev_ioctl+0x10/0x10 [ 697.097501] __x64_sys_ioctl+0x18f/0x210 [ 697.097514] do_syscall_64+0xbf/0x390 [ 697.097531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.097543] RIP: 0033:0x7fb50750a8d7 [ 697.097552] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 697.097563] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.097574] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb50750a8d7 [ 697.097582] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 697.097589] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 697.097595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 697.097602] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 697.097617] 03:53:17 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e16004e208140e4090507001bf84cf5168e179d552d7b59e68fd9193896a55bf9a45364a0"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 697.184596] No source specified [ 697.188526] No source specified [ 697.215286] loop4: detected capacity change from 0 to 4 03:53:17 executing program 6: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0a0060200400e409050006a2393ba573404050edaec6bcf0d038b31bf0d1168c640ef1e7d590803305d381a1f9a9fc78e3317fa3a7975a98d73b68de1441d5cdba979de7890874f9f4544758416cb652fc8c178b727119b4f6a3add10fda548a4d4597fecb9afae15ef19957fb5360909a21beac53ec0d22f4645fbb569b5c13936983698d7874cdcb91584b5a18914bcb053c2fc185de2b1d1d5bd6707423b7f53613fb8013dc060d31c33e015680c55e9e1ed2"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 697.256801] EXT4-fs: Mount option(s) incompatible with ext2 03:53:17 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) write(r0, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x20100000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:53:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:53:17 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 32) [ 697.447571] 9pnet_fd: Insufficient options for proto=fd [ 697.451835] No source specified [ 697.457902] No source specified [ 697.539023] loop4: detected capacity change from 0 to 4 [ 697.586493] EXT4-fs: Mount option(s) incompatible with ext2 03:53:27 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 33) 03:53:27 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x43}, @l2cap_cid_signaling={{0x3f}, [@l2cap_disconn_req={{0x6, 0x25, 0x4}, {0xc0f, 0x6}}, @l2cap_disconn_req={{0x6, 0x80, 0x4}, {0x383f, 0x4}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0xfff, 0x1, 0x40, 0x6}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x5, 0x6}}, @l2cap_conf_req={{0x4, 0x80, 0x8}, {0x83e0, 0xfbe1, [@l2cap_conf_mtu={0x1, 0x2, 0xfffb}]}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0x5, 0x3f}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x88a9, 0x401}}]}}, 0x48) 03:53:27 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0xa6, 0xe175}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@any, "85cb45e3360960fcc626545bb1a72543", 0x4}}}, 0x1a) 03:53:27 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) write(r0, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:27 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:53:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 706.980657] No source specified [ 706.983550] No source specified [ 706.986435] 9pnet_fd: Insufficient options for proto=fd [ 707.021668] FAULT_INJECTION: forcing a failure. [ 707.021668] name failslab, interval 1, probability 0, space 0, times 0 [ 707.023618] CPU: 1 UID: 0 PID: 6644 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 707.023648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 707.023661] Call Trace: [ 707.023668] [ 707.023676] dump_stack_lvl+0xfa/0x120 [ 707.023712] should_fail_ex+0x4d7/0x5e0 [ 707.023749] ? __kernfs_new_node+0xd3/0x870 [ 707.023780] should_failslab+0xc2/0x120 [ 707.023811] kmem_cache_alloc_noprof+0x72/0x680 [ 707.023842] ? __kernfs_new_node+0xd3/0x870 [ 707.023872] __kernfs_new_node+0xd3/0x870 [ 707.023907] ? __pfx___kernfs_new_node+0x10/0x10 [ 707.023942] ? lock_acquire+0x15e/0x2f0 [ 707.023968] ? kernfs_root+0x23/0x2a0 [ 707.023997] ? find_held_lock+0x2b/0x80 [ 707.024030] ? kernfs_root+0xee/0x2a0 [ 707.024063] ? lock_release+0xc8/0x290 [ 707.024086] ? lock_is_held_type+0x9e/0x120 [ 707.024124] kernfs_new_node+0x13c/0x1e0 [ 707.024149] __kernfs_create_file+0x55/0x360 [ 707.024179] sysfs_add_file_mode_ns+0x21c/0x440 [ 707.024212] ? __pfx_dev_attr_store+0x10/0x10 [ 707.024241] internal_create_group+0x571/0xeb0 [ 707.024282] ? __pfx_internal_create_group+0x10/0x10 [ 707.024314] ? blk_validate_limits+0xc27/0x15c0 [ 707.024345] ? lock_is_held_type+0x9e/0x120 [ 707.024372] loop_configure+0xc42/0x1590 [ 707.024419] ? __pfx_loop_configure+0x10/0x10 [ 707.024458] ? avc_has_extended_perms+0x107/0xf20 [ 707.024484] ? find_held_lock+0x2b/0x80 [ 707.024515] ? avc_has_extended_perms+0x23b/0xf20 [ 707.024540] ? lock_release+0xc8/0x290 [ 707.024568] lo_ioctl+0x66d/0x1c70 [ 707.024596] ? __pfx_lo_ioctl+0x10/0x10 [ 707.024619] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 707.024652] ? lock_acquire+0x15e/0x2f0 [ 707.024676] ? __virt_addr_valid+0x1c6/0x5d0 [ 707.024711] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 707.024736] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 707.024758] ? lock_release+0xc8/0x290 [ 707.024785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 707.024841] ? __up_read+0x420/0x750 [ 707.024868] ? __fget_files+0x34/0x3b0 [ 707.024893] ? find_held_lock+0x2b/0x80 [ 707.024924] ? __fget_files+0x203/0x3b0 [ 707.024949] ? __pfx_lo_ioctl+0x10/0x10 [ 707.024973] blkdev_ioctl+0x27c/0x6d0 [ 707.025001] ? __pfx_blkdev_ioctl+0x10/0x10 [ 707.025029] ? selinux_file_ioctl+0xb9/0x280 [ 707.025063] ? __pfx_blkdev_ioctl+0x10/0x10 [ 707.025093] __x64_sys_ioctl+0x18f/0x210 [ 707.025117] do_syscall_64+0xbf/0x390 [ 707.025147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.025168] RIP: 0033:0x7fb50750a8d7 [ 707.025185] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 707.025205] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 707.025226] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb50750a8d7 [ 707.025240] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 707.025253] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 707.025266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 707.025278] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 707.025306] 03:53:27 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) write(r0, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 707.095805] loop4: detected capacity change from 0 to 4 03:53:27 executing program 6: sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x100, 0x70bd26, 0x25dfdbfe, {0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0xc011) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0006001e0700e2ff0000b7f000"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_conf_req={{0x4, 0x2, 0x1e}, {0x1f, 0x8, [@l2cap_conf_flushto={0x2, 0x2, 0x8001}, @l2cap_conf_efs={0x6, 0xffffffffffffff30, {0x1f, 0x1, 0xf1, 0x9, 0x7c2e9c7c, 0x402668f7}}, @l2cap_conf_fcs]}}]}}, 0x2b) [ 707.125752] No source specified [ 707.127657] 9pnet_fd: Insufficient options for proto=fd [ 707.130023] No source specified [ 707.132457] EXT4-fs: Mount option(s) incompatible with ext2 03:53:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:53:27 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xef080000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:53:27 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x9}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03da00545396ee5e10f4b8c96d572c7540a615fcc65d0000000000"], 0x1b) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 707.247808] No source specified [ 707.251864] No source specified [ 707.267711] 9pnet_fd: Insufficient options for proto=fd 03:53:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 34) [ 707.381879] loop4: detected capacity change from 0 to 4 [ 707.386953] EXT4-fs: Mount option(s) incompatible with ext2 03:53:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 35) 03:53:38 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:38 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="1c0e0a0060060000ea74fa1000"], 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x81, 0x0, "aa2775", 0x200, 0x5, "13f1ca673f42585888dafce890c34d036fc06a88d164444a409917903327fe7c57043af60bbad6878c430ad8215541c0248e855f05a5849bc1f04199983b44710061c2dc258ddbbb14b9cee6857295ffe7bc056d45ab8fcad087f6891e7f40f4ff6a1699c267fd98827a389c8c3092e279bf12db5887617b6d25bc97174061615042a3af8899bf9cf4369290efbc12938a57279028d4d9366820ea0499bf82dbbc3ab7979c372049f74b5509dc4030a64434d6697e3a6a41b4d3aa8c35dd5cd2ac9d52e13664314621b6b6c16539d7c02801de34f0891edc751db0092e334e60f805a444e07668e970a3db59d77a92b9"}, {@none, 0x1, 0x5, "e21ff3", 0x9, 0x8, "ecce4805129d3f508e0200e7f19c2c3fb3e62909fbfe3f27625cf357ba54db911695b7281e5e192facd8ba5a306d2d99a478c4730428a478f4b76eae6b1058237634b6d7510ae7fd5d9d237dde7c956b7cf2b2149ad2d2a6dfa91cf1348d1962dc1ce48547a2deea5dfe303f49ffadca7e04f8c9d42241c6ecc4f967f3cb6d67fc8927b028026ebbdc9f368a85067b00ae8a92913b2f733445a77fd7949c99f2102bfc7321eb19cd5d0e578e7d65390115279b02fb820c91ddb71da182cc88acea97156840d73e538595c552d70700e2a6fa0cc3e49c6acf4cf1176f75b0f64ee944508dc12b4e62e70346791ebff6d9"}]}}}, 0x200) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:53:38 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:53:38 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000000c0)={{r0}, 0x5, &(0x7f0000000040)=[0xfffffffffffffeff, 0x3, 0x401, 0xfffffffffffffff7, 0x200], 0x400, 0x2, [0x4, 0x6, 0x50, 0x4]}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:53:38 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:38 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 718.001548] FAULT_INJECTION: forcing a failure. [ 718.001548] name failslab, interval 1, probability 0, space 0, times 0 [ 718.003640] CPU: 0 UID: 0 PID: 6695 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 718.003672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 718.003699] Call Trace: [ 718.003706] [ 718.003714] dump_stack_lvl+0xfa/0x120 [ 718.003750] should_fail_ex+0x4d7/0x5e0 [ 718.003789] ? __kernfs_new_node+0xd3/0x870 [ 718.003820] should_failslab+0xc2/0x120 [ 718.003850] kmem_cache_alloc_noprof+0x72/0x680 [ 718.003880] ? __kernfs_new_node+0xd3/0x870 [ 718.003910] __kernfs_new_node+0xd3/0x870 [ 718.003944] ? __pfx___kernfs_new_node+0x10/0x10 [ 718.003979] ? lock_acquire+0x15e/0x2f0 [ 718.004004] ? kernfs_root+0x23/0x2a0 [ 718.004034] ? find_held_lock+0x2b/0x80 [ 718.004065] ? kernfs_root+0xee/0x2a0 [ 718.004102] ? lock_release+0xc8/0x290 [ 718.004125] ? lock_is_held_type+0x9e/0x120 [ 718.004157] kernfs_new_node+0x13c/0x1e0 [ 718.004183] __kernfs_create_file+0x55/0x360 [ 718.004213] sysfs_add_file_mode_ns+0x21c/0x440 [ 718.004245] ? __pfx_dev_attr_store+0x10/0x10 [ 718.004273] internal_create_group+0x571/0xeb0 [ 718.004314] ? __pfx_internal_create_group+0x10/0x10 [ 718.004345] ? blk_validate_limits+0xc27/0x15c0 [ 718.004379] 9pnet_fd: Insufficient options for proto=fd [ 718.004376] ? lock_is_held_type+0x9e/0x120 [ 718.004405] loop_configure+0xc42/0x1590 [ 718.004452] ? __pfx_loop_configure+0x10/0x10 [ 718.004491] ? avc_has_extended_perms+0x107/0xf20 [ 718.004522] ? find_held_lock+0x2b/0x80 [ 718.004565] ? avc_has_extended_perms+0x23b/0xf20 [ 718.004599] ? lock_release+0xc8/0x290 [ 718.004637] lo_ioctl+0x66d/0x1c70 [ 718.004678] ? __pfx_lo_ioctl+0x10/0x10 [ 718.004709] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 718.004755] ? lock_acquire+0x15e/0x2f0 [ 718.004788] ? __virt_addr_valid+0x1c6/0x5d0 [ 718.004836] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 718.004870] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 718.004899] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 718.004928] ? lock_release+0xc8/0x290 [ 718.004965] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 718.005044] ? __up_read+0x420/0x750 [ 718.005081] ? __fget_files+0x34/0x3b0 [ 718.005115] ? find_held_lock+0x2b/0x80 [ 718.005158] ? __fget_files+0x203/0x3b0 [ 718.005192] ? __pfx_lo_ioctl+0x10/0x10 [ 718.005225] blkdev_ioctl+0x27c/0x6d0 [ 718.005264] ? __pfx_blkdev_ioctl+0x10/0x10 [ 718.005302] ? selinux_file_ioctl+0xb9/0x280 [ 718.005350] ? __pfx_blkdev_ioctl+0x10/0x10 [ 718.005391] __x64_sys_ioctl+0x18f/0x210 [ 718.005423] do_syscall_64+0xbf/0x390 [ 718.005464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.005494] RIP: 0033:0x7fb50750a8d7 [ 718.005516] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 718.005543] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 718.005571] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb50750a8d7 [ 718.005590] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 718.005607] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 718.005624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 718.005641] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 718.005680] [ 718.007536] No source specified [ 718.072535] loop4: detected capacity change from 0 to 4 [ 718.098412] EXT4-fs: Mount option(s) incompatible with ext2 03:53:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:53:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{0x29}, 0x1}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0xffffffffffffff0e) 03:53:38 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:38 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x0, 0x50}, @l2cap_cid_signaling={{0x4c}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x1}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x4, 0x7f, 0xfff, 0x101}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0xc92, 0x4}}, @l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x1f8, 0x5, 0x1a70, 0x2}}, @l2cap_conf_req={{0x4, 0x9, 0x10}, {0x0, 0x200, [@l2cap_conf_mtu={0x1, 0x2, 0x3a}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0xdde}]}}, @l2cap_cmd_rej_unk={{0x1, 0x3f, 0x2}, {0x3f}}, @l2cap_conn_rsp={{0x3, 0xf9, 0x8}, {0x2, 0x5e00, 0x6, 0x7}}]}}, 0x55) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xfc) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:53:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 36) [ 718.279327] No source specified [ 718.308727] 9pnet_fd: Insufficient options for proto=fd [ 718.335674] loop4: detected capacity change from 0 to 4 [ 718.362488] EXT4-fs: Mount option(s) incompatible with ext2 03:53:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:53:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:53:38 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xf9fdffff, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:53:38 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1d}, {0x7, [{0xc8, 0x9}, {0xc8, 0x8}, {0xc8, 0xc80}, {0xc9, 0xf01}, {0xc9, 0x2aba}, {0xc9, 0x17}, {0xc9, 0x83a4}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xb8, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 718.538412] No source specified [ 718.544885] No source specified 03:53:56 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) 03:53:56 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:56 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:56 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa3}, "cb773372a0df1e5a819d8ea061451f532c0389b8231f30007a3774e35caabdd4936330d9a690cd938aca4be46409f8264f5aaf53a79b3014425ddb52fc3965d3e0960e5ed4c448149a3a732adce79995c95d7e8244302e1b1c2c6ea03b0ddaee8f2738538a7755cf4c82cb437ee948fabda9667639b4b524d3cf380f9a658b00f374fbd711098fd0d502397e3f4cf96fd88a9be1b1b931ed29f3784d27b076e91d0045"}, 0xa7) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe9}, "368d22a13a24ff49e5bed322f3da6c692d77850d94b761cd254d826db9dade24089475249d1bd6de1985a991fafcbb73c7c0c6ee338a6a1ac4c9b3e5b31e815b906c35a531202ed7452e38872d55d6f8000a1ec37f8d5b04763e3a39178b7b1dc38812d142a140768a62e41b883b905354eafa30a9b37c9c8462e53a7089ffe899163c9b8bd40790e71dabda312fb3d82d0913b9c7b5176c873f01690338f1934f0c7e6dbb0839f5dccd9959596f9e032154cbf45012f35fe83918da2f0bcca344051a17728c192bb518ee10381c4ee79d5bc955cac129fbefd749d5e82bda61e7d828d278c482efa8"}, 0xed) 03:53:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 37) 03:53:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) 03:53:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xffffe000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:53:56 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04040affffffffffff547c1400c8b84123c3562cd75d5fb27a31dbe72f647680a824d5f7912a0cfef1ff28b687fb6279e7c4b0247fec11e6b1020093ed"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 736.808995] FAULT_INJECTION: forcing a failure. [ 736.808995] name failslab, interval 1, probability 0, space 0, times 0 [ 736.810863] CPU: 0 UID: 0 PID: 6744 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 736.810891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 736.810904] Call Trace: [ 736.810912] [ 736.810920] dump_stack_lvl+0xfa/0x120 [ 736.810956] should_fail_ex+0x4d7/0x5e0 [ 736.810993] ? __kernfs_new_node+0xd3/0x870 [ 736.811024] should_failslab+0xc2/0x120 [ 736.811055] kmem_cache_alloc_noprof+0x72/0x680 [ 736.811086] ? __kernfs_new_node+0xd3/0x870 [ 736.811122] __kernfs_new_node+0xd3/0x870 [ 736.811157] ? __pfx___kernfs_new_node+0x10/0x10 [ 736.811192] ? lock_acquire+0x15e/0x2f0 [ 736.811217] ? kernfs_root+0x23/0x2a0 [ 736.811247] ? find_held_lock+0x2b/0x80 [ 736.811278] ? kernfs_root+0xee/0x2a0 [ 736.811308] ? lock_release+0xc8/0x290 [ 736.811330] ? lock_is_held_type+0x9e/0x120 [ 736.811361] kernfs_new_node+0x13c/0x1e0 [ 736.811386] __kernfs_create_file+0x55/0x360 [ 736.811416] sysfs_add_file_mode_ns+0x21c/0x440 [ 736.811449] ? __pfx_dev_attr_store+0x10/0x10 [ 736.811477] internal_create_group+0x571/0xeb0 [ 736.811518] ? __pfx_internal_create_group+0x10/0x10 [ 736.811549] ? blk_validate_limits+0xc27/0x15c0 [ 736.811580] ? lock_is_held_type+0x9e/0x120 [ 736.811607] loop_configure+0xc42/0x1590 [ 736.811654] ? __pfx_loop_configure+0x10/0x10 [ 736.811693] ? avc_has_extended_perms+0x107/0xf20 [ 736.811719] ? find_held_lock+0x2b/0x80 [ 736.811750] ? avc_has_extended_perms+0x23b/0xf20 [ 736.811774] ? lock_release+0xc8/0x290 [ 736.811801] lo_ioctl+0x66d/0x1c70 [ 736.811830] ? __pfx_lo_ioctl+0x10/0x10 [ 736.811852] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 736.811885] ? lock_acquire+0x15e/0x2f0 [ 736.811908] ? __virt_addr_valid+0x1c6/0x5d0 [ 736.811965] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 736.811999] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 736.812030] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 736.812056] ? lock_release+0xc8/0x290 [ 736.812082] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 736.812139] ? __up_read+0x420/0x750 [ 736.812165] ? __fget_files+0x34/0x3b0 [ 736.812190] ? find_held_lock+0x2b/0x80 [ 736.812221] ? __fget_files+0x203/0x3b0 [ 736.812246] ? __pfx_lo_ioctl+0x10/0x10 [ 736.812269] blkdev_ioctl+0x27c/0x6d0 [ 736.812298] ? __pfx_blkdev_ioctl+0x10/0x10 [ 736.812326] ? selinux_file_ioctl+0xb9/0x280 [ 736.812360] ? __pfx_blkdev_ioctl+0x10/0x10 [ 736.812389] __x64_sys_ioctl+0x18f/0x210 [ 736.812413] do_syscall_64+0xbf/0x390 [ 736.812442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.812464] RIP: 0033:0x7fb50750a8d7 [ 736.812481] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 736.812500] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 736.812521] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb50750a8d7 [ 736.812535] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 736.812548] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 736.812561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 736.812573] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 736.812601] [ 736.815052] 9pnet_fd: Insufficient options for proto=fd [ 736.824507] No source specified [ 736.868302] loop4: detected capacity change from 0 to 4 [ 736.884190] EXT4-fs: Mount option(s) incompatible with ext2 03:53:57 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295", 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x1f, @any, 0x9, 0x1}, 0xe) sendfile(r1, r2, 0x0, 0xfdef) write(r0, &(0x7f0000000900)="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", 0x185) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r3, 0x0, 0xfdef) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:53:57 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x7f, 0xc9}}}, 0x7) [ 736.940940] No source specified 03:53:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 38) 03:53:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) 03:53:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xfffffdf9, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:53:57 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:53:57 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 737.121717] loop4: detected capacity change from 0 to 4 [ 737.151180] EXT4-fs: Mount option(s) incompatible with ext2 [ 737.155041] 9pnet_fd: Insufficient options for proto=fd [ 737.252426] No source specified [ 737.266874] No source specified 03:54:07 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) 03:54:07 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:54:07 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY={{0xfb}, 0x80}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x11, 0x2}, {0x1}}}}, 0xf) 03:54:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) 03:54:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 39) 03:54:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:54:07 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:54:07 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 747.204879] loop4: detected capacity change from 0 to 4 [ 747.223961] EXT4-fs: Mount option(s) incompatible with ext2 [ 747.258396] 9pnet_fd: Insufficient options for proto=fd [ 747.264842] No source specified [ 747.271807] No source specified 03:54:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 40) 03:54:07 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:54:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:54:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 747.350583] loop4: detected capacity change from 0 to 4 [ 747.358755] EXT4-fs: Mount option(s) incompatible with ext2 03:54:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f0000000040)='&\\,:(}!\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xed}, "5adbe81cc3f06e5b9d17764aaf66bfdf1bab2661cb05a6f850f6353397b4decb8f7543a92f8395a0ed0e7ba68709a4721221a68b06c3c16cbeb337140dd0f6f26837956f4316409492e46441f44e48a83295faa5dad88f933c574068b28b268dbe0127599a2b52361b1f268d8bdff9dbd2ba62c20d94d1d0ee834c6b317c9bb3f72bacaa0dceb02406f0ec9dc73ca6c8963e13b9ad857327bc4574fcf5ca49684245e3d5afc36efc7ceb96e7abfc5764101921e7378877fe3a44f7fa690d1f054eeb10afa8c9c2e8c0bc9d71e712fef51a84a410651945f07f9b59e6cb9e05b96199eae3a1608814ef4f521fea"}, 0xf1) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:54:07 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfe}, "8fdd5a7036128725b8df70692bfce0cdd307f03f04d456444b7745747af51d134fb8beb39d10d1a17e93d25bd1d0630c94bf7763cadf895e1330fc1267675fe5b3f331d7e98fb3c8d523fce46bf578ec7dd5f0966a0f9166ee97808cd7173bc98d9f9b1208d1e30d66251dc24b7dacaf9a34f6aa0a2369405850cd686d817d9f3ed8502d22f7be64ab9e38b93ad0145386a755dc80a82340c090684d560c3e4efef648ea50443c822a8d9be1a338f2bcae187fb71b67f61c764ecaf8a20af72237a19372592f6a1e0bb95509f962f772a77ef17d16ca10602ee54244d7045af04b93d9392fc207a17bbf7e61bbde8d1a99bd2fe4a7ad5cb962f3cc749543"}, 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xce}, "af085c17e4fa86c588dcffd4c38851c732a0d97c5a4f485a682c1efa314284697d1344141b29c57b5296f318a08aeecc386d520f3892f20fad206055ae8ace06489bb57b063e96e4a39907afa5c62777783dc0c5ebf27f4ccba32bd731eba6ab2019b1e9be5acc2b09cb8a0e1f29c51c2ca92a10e0994bac8078443141d443f527f5dd380249c5971e091215ccdacfa27b983e6083f323b9219837aa629f9415e87bf8d21eea8a9ec90aa6425d376b2290cde7b78654aa1d76f6f3c0c6ce96292333605922a760737dc48d77cb9d"}, 0xd2) [ 747.436942] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 747.439673] No source specified [ 747.441606] No source specified 03:54:07 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:54:07 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, 0x0, 0x0) 03:54:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 41) 03:54:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:54:16 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x7f}}, @l2cap_info_req={{0xa, 0x20, 0x2}, {0x81}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8002c024557ad74f30ea6ea653239bae05f6ccc2e10b0b5cb86528931e5449a65722cefe344c1cccb6e9d1c40eba44e4a223b492808"], 0x30) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:54:16 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:54:16 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:54:16 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, 0x0, 0x0) 03:54:16 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) 03:54:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 756.758800] loop4: detected capacity change from 0 to 4 [ 756.759377] FAULT_INJECTION: forcing a failure. [ 756.759377] name failslab, interval 1, probability 0, space 0, times 0 [ 756.760388] CPU: 1 UID: 0 PID: 6829 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 756.760404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 756.760411] Call Trace: [ 756.760416] [ 756.760424] dump_stack_lvl+0xfa/0x120 [ 756.760445] should_fail_ex+0x4d7/0x5e0 [ 756.760467] should_failslab+0xc2/0x120 [ 756.760485] __kmalloc_cache_noprof+0x73/0x6a0 [ 756.760496] ? lock_release+0xc8/0x290 [ 756.760511] ? kobject_uevent_env+0x22e/0xf90 [ 756.760525] ? kobject_uevent_env+0x22e/0xf90 [ 756.760536] kobject_uevent_env+0x22e/0xf90 [ 756.760549] ? lock_is_held_type+0x9e/0x120 [ 756.760565] loop_configure+0xe2d/0x1590 [ 756.760591] ? __pfx_loop_configure+0x10/0x10 [ 756.760611] ? avc_has_extended_perms+0x107/0xf20 [ 756.760626] ? find_held_lock+0x2b/0x80 [ 756.760643] ? avc_has_extended_perms+0x23b/0xf20 [ 756.760657] ? lock_release+0xc8/0x290 [ 756.760671] lo_ioctl+0x66d/0x1c70 [ 756.760686] ? __pfx_lo_ioctl+0x10/0x10 [ 756.760698] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 756.760716] ? lock_acquire+0x15e/0x2f0 [ 756.760728] ? __virt_addr_valid+0x1c6/0x5d0 [ 756.760748] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 756.760762] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 756.760774] ? lock_release+0xc8/0x290 [ 756.760788] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 756.760819] ? __up_read+0x420/0x750 [ 756.760833] ? __fget_files+0x34/0x3b0 [ 756.760847] ? find_held_lock+0x2b/0x80 [ 756.760864] ? __fget_files+0x203/0x3b0 [ 756.760877] ? __pfx_lo_ioctl+0x10/0x10 [ 756.760890] blkdev_ioctl+0x27c/0x6d0 [ 756.760905] ? __pfx_blkdev_ioctl+0x10/0x10 [ 756.760920] ? selinux_file_ioctl+0xb9/0x280 [ 756.760939] ? __pfx_blkdev_ioctl+0x10/0x10 [ 756.760955] __x64_sys_ioctl+0x18f/0x210 [ 756.760968] do_syscall_64+0xbf/0x390 [ 756.760984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.760997] RIP: 0033:0x7fb50750a8d7 [ 756.761006] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 756.761017] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.761028] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb50750a8d7 [ 756.761036] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 756.761043] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 756.761049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 756.761056] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 756.761071] 03:54:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) [ 756.818414] No source specified [ 756.829751] No source specified [ 756.833171] EXT4-fs: Mount option(s) incompatible with ext2 03:54:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 42) 03:54:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:54:17 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a18cb2657150323fc83de"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_move_chan_rsp={{0xf, 0x3f, 0x4}, {0x2, 0x1ff}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x20}}, @l2cap_conn_rsp={{0x3, 0xbe, 0x8}, {0x8, 0x9, 0x7, 0x6}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x6, 0x400, 0xbe1, 0x685a}}]}}, 0x31) 03:54:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe7}, "995c12f53f29587a2008dbc3b4defe7f041d66444a8fa9f8bffdeef37a7319ef6d03cc190967c4ac0330384856dd3da51f4ba471204e3c923e9a1d5372ea567ca3121aee0c102c2edf02121de26a78c9fe98d232f5ff5280839ab71536f42cfe2784cac6070506cda0469c47a508df17903f2c8a49ff7b130ea0cd92f6ae0157807f5999bed1ff34f25bf8f72807683eb87dd8609f52b9681daa480d553df2f9488e9c4c8a36dd28d1e735609a1b165d0ebc74f11ef74b61512dca5fb0974853d9514b841221539bef7fe84986a1a9da751d7f58115ab77d86b0e6c52420357384d1151f531e27"}, 0xeb) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:54:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x8000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:54:17 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, 0x0, 0x0) [ 757.004787] loop4: detected capacity change from 0 to 4 [ 757.015946] EXT4-fs: Mount option(s) incompatible with ext2 [ 757.096359] loop6: detected capacity change from 0 to 264192 [ 757.101573] nfs: Unknown parameter 'wfdno' 03:54:17 executing program 6: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) tee(r2, r4, 0x0, 0x8) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000002980), 0x80000, &(0x7f00000029c0)={'trans=unix,', {[{@cache_fscache}, {@fscache}, {@nodevmap}, {@cache_mmap}, {@aname={'aname', 0x3d, '{'}}, {@cache_loose}, {@mmap}, {@cache_fscache}, {@posixacl}, {@access_user}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@permit_directio}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x62, 0x32, 0x65, 0x64, 0x37, 0x32, 0x30], 0x2d, [0x33, 0x63, 0x66, 0x62], 0x2d, [0x63, 0x30], 0x2d, [0x66, 0x37, 0x63, 0x32], 0x2d, [0x35, 0x31, 0x65, 0x33, 0x63, 0x37, 0x37, 0x37]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@seclabel}, {@permit_directio}, {@appraise_type}]}}) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "ae8aafeb52f941e2", "281bb533e7c4b7fc87bbfd625f39bad0912dda13b43cadfd8909a0e2272787eb", "0f8bf8d1", "61723be84826cf71"}, 0x38) syz_io_uring_setup(0x4ebf, &(0x7f0000002b00)={0x0, 0x9ad6, 0x20, 0x3, 0x307}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000002b80)=0x0, &(0x7f0000002bc0)) r6 = syz_io_uring_complete(r5) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000002c00)=0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@noextend}]}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000002c80)={0xb31, 0x0, &(0x7f0000002c40)=[r1]}, 0x1) [ 757.107273] No source specified r9 = syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0xff, 0x9, &(0x7f0000002800)=[{&(0x7f0000000340)="4659dcc19e5cd7656959d6135be28a916fe634a7d2d02c9a35a42e30ca034ef36f9afefdf94f7802ae340e538aaa23b4687986df1c6896e9c04d5249978935f43c509310aa89ef134301ffb5af7ee49ea4efad8419c7032a74a2c8030373a9bad7bbc3576a9e5b836008645d55053a7306dcb31738bb728649c57786d36b1ba04f0f68f9be4f0db92c666ae95bdc56bbe64b4019ad4344efe0f3300636d959d3533495d0abe4d7ab05150b65e3a65e5f5e838ddd723ecb08b9d2641310c1fb0edb2b374957ed6d1d78a348f6965e1643033e72e259407ec90d761ab68814878a000ed347d981b81554010cd11e2ac19ab502", 0xf2, 0x100000000}, {&(0x7f0000000240)="1224cc8ce19fadc23254e62870734b013ef3f6d6ba98ca54c19f36be44d55b97784ac3a5dad952a5a011be4b7d223a9742afe7fe3e72362c696617c62530422e2ccb87b4efe3f4d0fdcdfa174713a145cd241d07e0000f0268b33017396cbd64031dd7854b01466c7b01ffb5e12ea1", 0x6f}, {&(0x7f0000000440)="0d2966115a4c5c09b29fd36a0807d2caa050604c98c0cd55bfe8e9d5bb4927e3a9c4da3fc32f455f72da1ca9f6164b8ef41b48c1c867b673a29f23d8269f04945124f30879cf79316a02c5f403f8bc94c529d44a6420d5a059a11c2465ffbebe1e", 0x61, 0x1}, {&(0x7f00000004c0)="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", 0x1000, 0x200}, {&(0x7f00000014c0)="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", 0x1000, 0x3f}, {&(0x7f00000024c0)="55f77f0206543a517f13ea63794218cdd507c6a939c96b18c81e7cc67a29725b435d5eeb7ee51c1ed0964e6b8a7b29db4974c9bcfa24fe71bee76efe90017c4e05ed4313d11488ed21309b493b2bff4e19157dfe10af9251722797c0dc2aaef822363b17323d405873a56af278bd453cf7157c48cdb2bdcdc3f7b366af18faf3120ec4a93b1b910876e8821cdf7f8425ca047ed79fb9f6b1d6623744543d45c744f29cfe4f19a4aad535ef322730e4cac2", 0xb1, 0x8000}, {&(0x7f0000002580)="6ca3d09bba2e7e6f49bb9e4a710cf8d74b49ba35cf04dc7702a40728b76cda66e5643fc5346e62d3cc9bd5ddcbf71429881d668212a2a2ed58d8bd4a23338b22175b2442ef7b0f1908ede555968efa98ffaf2de1d2e1681a0012b3df8eb455095879ce606c4b", 0x66, 0xffffffffffffc3d3}, {&(0x7f0000002600)="0ce5fd85f0089d5976726ef9b044473148dd649d155f858359ffbdd324558d93213a7ee39e2797b6ab2bb12d62c47dadd700843a4d76e142c8e21d16a00e90194f73f6a0bcb5a359c90e87706dc0c4eb12165e8a97d83ab3269b7ddb2f06c4e379378b303e52ad3f08f10b3d9c63b836560decdf23ac7cd32f7730f8ea27e89662f8bca0396809686fae491e256250f3a2c30f077e6b6a6fe40c6259908c9bf198a0acff7c70225faf1eb2d7356955ef76edf8f18c78f777cd0dafef1ff522d494c0ac1823da9418372feb03ccf6afa08b7026", 0xd3, 0x8001}, {&(0x7f0000002700)="2679995befe69168ecb327eee3d1f784647cf5a02ba5dcb464a5f6dc02abb92dd5ea15dee0acc183a67e8fa041e225bad72c8f9b548e0a8d10ac6e9dbcf511c9535479cc30ff843cced7312f09d98711cad5d68bc557ecd3da1d2a9e0ae67d31404d28f7f0f0ce5a4114201b0b33fbe6351dd40b42c2ce3afe1ba1213ee52d5806bb2b4f673bf1a7fe609435d7240c3bc39e0454e5f586901d81667f5390df2d6d38acf362565b06f4a1aa8c83c1c9a21f82e8c5c011f0ded7747f3ca5af06bdc49055c8b0e800071dfab33821a1da265043f34a099293bf0e411a5d7b402729bfb885346ffa13c2f60a4f9730", 0xed, 0x4}], 0x2004000, &(0x7f0000002900)={[{'wfdno'}, {'\xbb#:['}], [{@seclabel}, {@obj_type={'obj_type', 0x3d, '*\xd7-\\'}}, {@hash}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'trans=fd,'}}, {@euid_lt}, {@obj_role={'obj_role', 0x3d, 'rfdno'}}]}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r9) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x3f, 0xc9, {0x0, 0x1000b98, 0x5, 0x1, 0xf2}}}}, 0x13) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 757.117763] No source specified [ 757.200735] loop6: detected capacity change from 0 to 264192 [ 757.202795] nfs: Unknown parameter 'wfdno' 03:54:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:54:27 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0000000000000007000100"], 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x0, 0x4}, {0xe9, 0x6}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03c9007e02e7e7bb4f2753b9303b4b3472d2f1f962ed98be6202e1dcf19c20e99f19d66e8b83f32cd9abb847857442274033d75023dd5d6a7fb7b0f113c104684052693d14c51c1d85e8681ab84ab144e808632193203e8bd3d68b7df73f2dd51d97c2f3cf910fee176d8bdbcaf1863dfb50ff1a958c863b741a1827f00b50cfad68"], 0x82) 03:54:27 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:54:27 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x2}}, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:54:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 43) 03:54:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xe0ffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:54:27 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240), 0x0) 03:54:27 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 766.938422] No source specified [ 766.942719] loop4: detected capacity change from 0 to 4 [ 766.946458] No source specified [ 766.950228] FAULT_INJECTION: forcing a failure. [ 766.950228] name failslab, interval 1, probability 0, space 0, times 0 [ 766.952069] CPU: 1 UID: 0 PID: 6890 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 766.952108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 766.952121] Call Trace: [ 766.952129] [ 766.952143] dump_stack_lvl+0xfa/0x120 [ 766.952181] should_fail_ex+0x4d7/0x5e0 [ 766.952223] should_failslab+0xc2/0x120 [ 766.952258] __kmalloc_noprof+0xc8/0x760 [ 766.952297] ? __create_object+0x59/0x80 [ 766.952348] ? kobject_get_path+0xc9/0x200 [ 766.952389] ? kobject_get_path+0xc9/0x200 [ 766.952423] kobject_get_path+0xc9/0x200 [ 766.952458] ? kasan_save_track+0x14/0x30 [ 766.952496] kobject_uevent_env+0x252/0xf90 [ 766.952524] ? lock_is_held_type+0x9e/0x120 [ 766.952556] loop_configure+0xe2d/0x1590 [ 766.952607] ? __pfx_loop_configure+0x10/0x10 [ 766.952650] ? avc_has_extended_perms+0x107/0xf20 [ 766.952679] ? find_held_lock+0x2b/0x80 [ 766.952716] ? avc_has_extended_perms+0x23b/0xf20 [ 766.952744] ? lock_release+0xc8/0x290 [ 766.952774] lo_ioctl+0x66d/0x1c70 [ 766.952803] ? rcu_core+0x7c8/0x1800 [ 766.952834] ? __pfx_lo_ioctl+0x10/0x10 [ 766.952859] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 766.952892] ? __lock_acquire+0x694/0x1b70 [ 766.952923] ? perf_trace_ata_qc_issue_template+0xbdb/0xc20 [ 766.952957] ? lock_acquire+0x15e/0x2f0 [ 766.952984] ? __virt_addr_valid+0x1c6/0x5d0 [ 766.953021] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 766.953083] ? __up_read+0x420/0x750 [ 766.953113] ? __fget_files+0x34/0x3b0 [ 766.953141] ? find_held_lock+0x2b/0x80 [ 766.953177] ? __fget_files+0x203/0x3b0 [ 766.953205] ? __pfx_lo_ioctl+0x10/0x10 [ 766.953231] blkdev_ioctl+0x27c/0x6d0 [ 766.953264] ? __pfx_blkdev_ioctl+0x10/0x10 [ 766.953295] ? selinux_file_ioctl+0xb9/0x280 [ 766.953334] ? __pfx_blkdev_ioctl+0x10/0x10 [ 766.953367] __x64_sys_ioctl+0x18f/0x210 [ 766.953393] do_syscall_64+0xbf/0x390 [ 766.953426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.953450] RIP: 0033:0x7fb50750a8d7 [ 766.953469] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 766.953492] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 766.953515] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb50750a8d7 [ 766.953531] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 766.953546] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 766.953560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 766.953574] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 766.953605] 03:54:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:54:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:54:27 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x70}, "dcc8b11e14afe2fdc5c5837fcc9ee89a7839ef234cb1c0dc8f356afe3a28ba6f5e06be81a20c5f38c1233c9fb1f87924a7febf5ac07fdd8e9e86008d3fdc6ca2f5439e62cc1c18102dfc403b4b62bbb5dfc675ded60bd6719ddf264e9799d3eefce0cdec94783158c0d028bc9f444b85"}, 0x74) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:54:27 executing program 2: setitimer(0x2, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000100)) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02000000"], 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x4a}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 767.095775] 9pnet_fd: Insufficient options for proto=fd [ 767.097663] EXT4-fs: Mount option(s) incompatible with ext2 [ 767.176304] No source specified [ 767.187446] No source specified 03:54:27 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240), 0x0) 03:54:27 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:54:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 44) [ 767.365966] loop4: detected capacity change from 0 to 4 [ 767.402733] EXT4-fs: Mount option(s) incompatible with ext2 03:54:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 03:54:38 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x1, 0x2}}}}, 0x11) 03:54:38 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:54:38 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:54:38 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:54:38 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240), 0x0) 03:54:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 45) 03:54:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041d0a003f208140e409050013"], 0xd) syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001340), 0x8, 0x0) acct(&(0x7f0000000100)='./file1\x00') r1 = eventfd2(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/shm\x00', 0x0, 0x0) dup2(r1, r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001300), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x21}, "f1b3cc2a07f37b85a60f37f246fa8453490383c97037bf3da97ec0baa13ca4a6ac"}, 0x25) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 777.952019] No source specified [ 777.960391] No source specified [ 778.001579] loop4: detected capacity change from 0 to 4 [ 778.028619] 9pnet_fd: Insufficient options for proto=fd 03:54:38 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 778.070810] EXT4-fs: Mount option(s) incompatible with ext2 03:54:38 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650", 0x2f) 03:54:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 03:54:38 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 778.117705] No source specified [ 778.138969] No source specified 03:54:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 46) 03:54:38 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:54:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbc}, "75e8778c1762146f372a7a31c05ba1ebdf5362eef1781802e7226e40014466008821eaaa82a916b22ea808c6e7f6666d0f0a056f959dd75c7cdb81415b4ef11714ab7fd02d835d969d67415d617800a6987a11ed9fb883e23248319dcd29e37fb5f9818bf0754e4b27cb6a28162276ebd4e412fa7cae75e1f37d92214bbd8a334b1d614d9938295c3b646f9bd5572c159c71af1a8e57b231e5c521f36e5acd680315512d64ac3d2b067e602689ba113f25e1c407c04267e279eebb46"}, 0xc0) [ 778.306992] No source specified [ 778.312610] No source specified 03:54:38 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650", 0x2f) 03:54:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) [ 778.359851] loop4: detected capacity change from 0 to 4 [ 778.381649] EXT4-fs: Mount option(s) incompatible with ext2 03:54:49 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\t>\x00\x00\x00\x00\x00'], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:54:49 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x1, 0x4}, {0x800, 0x4551}}]}}, 0x11) 03:54:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:54:49 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650", 0x2f) 03:54:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 47) 03:54:49 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) 03:54:49 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:54:49 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 788.952416] No source specified [ 788.955503] No source specified [ 788.956496] loop4: detected capacity change from 0 to 4 [ 788.959559] 9pnet_fd: Insufficient options for proto=fd [ 788.963477] EXT4-fs: Mount option(s) incompatible with ext2 03:54:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:54:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 48) 03:54:49 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) [ 789.088537] 9pnet_fd: Insufficient options for proto=fd [ 789.089480] 9pnet_fd: Insufficient options for proto=fd 03:54:49 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="f20d840060208140e409050006"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 789.093761] No source specified [ 789.099494] No source specified 03:54:49 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 789.129730] loop4: detected capacity change from 0 to 4 [ 789.145446] EXT4-fs: Mount option(s) incompatible with ext2 03:54:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 789.253372] No source specified [ 789.258701] No source specified 03:54:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) 03:54:59 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="6e6f3d00000000000000000027d7454164d8309d86e0775fbd19ad9dc5d53d9dd61856c38fdeca68d76948e9c611518c661b42a783f6dd1450021ac3229e646ffcc8cc3156a44e2278fa7e41917592c8b3944d7673ab352218e25c8e973f1d0800f1122504aebaff4ea7215f29963df82fee08b005ff2e89a5a3b6b49f1c779002a2bdabcf", @ANYRESHEX=r2, @ANYBLOB=',noextend,\x00']) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @private1, 0x4}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a00feffffff0009050006"], 0xd) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472606e733d66642c7266646e6f4c67b965f098628b9709f996aa7a55094c5f0bc95e5057d24b522fd0a2e45a38afedc672e0f8c37a45286d50420bd89589528d1098f5debf9c9271c73797996f429bfb8e7acec6b2f7e460b23b79558eabbc8e7772354c86794cb80e53f1b3dbde5fef341626933bdb34cdb91fffd4ae299d0ba9fa6b9ede1c5f9c6fb0e200"/150, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',noextend,\x00']) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {0xf}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@loopback, r5}, 0x14) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@noextend}]}}) r8 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x40000, 0xa0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r10]) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [{@uid_lt={'uid<', 0xee00}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@permit_directio}]}}) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:54:59 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2", 0x47) 03:54:59 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:54:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 49) 03:54:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:54:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:54:59 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 799.024930] No source specified [ 799.025980] loop4: detected capacity change from 0 to 4 [ 799.030253] No source specified [ 799.030707] FAULT_INJECTION: forcing a failure. [ 799.030707] name failslab, interval 1, probability 0, space 0, times 0 [ 799.031861] CPU: 1 UID: 0 PID: 7020 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 799.031877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 799.031884] Call Trace: [ 799.031890] [ 799.031895] dump_stack_lvl+0xfa/0x120 [ 799.031920] should_fail_ex+0x4d7/0x5e0 [ 799.031943] ? skb_clone+0x191/0x400 [ 799.031962] should_failslab+0xc2/0x120 [ 799.031981] kmem_cache_alloc_noprof+0x72/0x680 [ 799.031996] ? netlink_broadcast_filtered+0xe6/0xe90 [ 799.032018] ? skb_clone+0x191/0x400 [ 799.032034] skb_clone+0x191/0x400 [ 799.032053] netlink_broadcast_filtered+0xab1/0xe90 [ 799.032078] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 799.032099] ? skb_put+0x138/0x1b0 [ 799.032113] netlink_broadcast+0x39/0x50 [ 799.032130] kobject_uevent_env+0xa58/0xf90 [ 799.032146] ? lock_is_held_type+0x9e/0x120 [ 799.032163] loop_configure+0xe2d/0x1590 [ 799.032190] ? __pfx_loop_configure+0x10/0x10 [ 799.032212] ? avc_has_extended_perms+0x107/0xf20 [ 799.032227] ? find_held_lock+0x2b/0x80 [ 799.032246] ? avc_has_extended_perms+0x23b/0xf20 [ 799.032260] ? lock_release+0xc8/0x290 [ 799.032276] lo_ioctl+0x66d/0x1c70 [ 799.032291] ? __pfx_lo_ioctl+0x10/0x10 [ 799.032303] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 799.032321] ? lock_acquire+0x15e/0x2f0 [ 799.032334] ? __virt_addr_valid+0x1c6/0x5d0 [ 799.032355] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 799.032370] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 799.032382] ? lock_release+0xc8/0x290 [ 799.032396] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 799.032428] ? __up_read+0x420/0x750 [ 799.032443] ? __fget_files+0x34/0x3b0 [ 799.032457] ? find_held_lock+0x2b/0x80 [ 799.032474] ? __fget_files+0x203/0x3b0 [ 799.032488] ? __pfx_lo_ioctl+0x10/0x10 [ 799.032505] blkdev_ioctl+0x27c/0x6d0 [ 799.032523] ? __pfx_blkdev_ioctl+0x10/0x10 [ 799.032538] ? selinux_file_ioctl+0xb9/0x280 [ 799.032557] ? __pfx_blkdev_ioctl+0x10/0x10 [ 799.032574] __x64_sys_ioctl+0x18f/0x210 [ 799.032588] do_syscall_64+0xbf/0x390 [ 799.032606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.032620] RIP: 0033:0x7fb50750a8d7 [ 799.032629] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 799.032642] RSP: 002b:00007fb504a7ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 799.032654] RAX: ffffffffffffffda RBX: 00007fb507554970 RCX: 00007fb50750a8d7 [ 799.032663] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 799.032671] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 799.032678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 799.032685] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 799.032702] [ 799.052878] 9pnet_fd: Insufficient options for proto=fd 03:54:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:54:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 799.128582] EXT4-fs: Mount option(s) incompatible with ext2 [ 799.138807] No source specified [ 799.148185] No source specified 03:54:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 50) 03:54:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) 03:54:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2010000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 799.259432] loop4: detected capacity change from 0 to 4 [ 799.264439] FAULT_INJECTION: forcing a failure. [ 799.264439] name failslab, interval 1, probability 0, space 0, times 0 [ 799.265519] CPU: 1 UID: 0 PID: 7041 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 799.265535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 799.265543] Call Trace: [ 799.265548] [ 799.265552] dump_stack_lvl+0xfa/0x120 [ 799.265578] should_fail_ex+0x4d7/0x5e0 [ 799.265600] ? __d_alloc+0x31/0xa10 [ 799.265616] should_failslab+0xc2/0x120 [ 799.265634] kmem_cache_alloc_lru_noprof+0x76/0x680 [ 799.265648] ? __d_lookup+0x255/0x490 [ 799.265664] ? __d_alloc+0x31/0xa10 [ 799.265678] __d_alloc+0x31/0xa10 [ 799.265695] d_alloc+0x4a/0x1e0 [ 799.265711] lookup_one_qstr_excl+0x174/0x270 [ 799.265722] ? mnt_want_write+0x153/0x420 [ 799.265735] filename_create+0x1ca/0x480 [ 799.265749] ? __pfx_filename_create+0x10/0x10 [ 799.265761] ? __virt_addr_valid+0x2e8/0x5d0 [ 799.265787] do_mkdirat+0x9a/0x3d0 [ 799.265803] ? __pfx_do_mkdirat+0x10/0x10 [ 799.265823] __x64_sys_mkdir+0xf3/0x140 [ 799.265838] do_syscall_64+0xbf/0x390 [ 799.265855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.265868] RIP: 0033:0x7fb507509c27 [ 799.265878] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 799.265889] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 799.265901] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb507509c27 [ 799.265909] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 799.265916] RBP: 00007fb504a80040 R08: 0000000000000000 R09: ffffffffffffffff [ 799.265924] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 799.265931] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 799.265947] [ 799.280642] No source specified [ 799.281428] No source specified 03:54:59 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:54:59 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0xff}, 0x9}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:54:59 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2", 0x47) [ 799.308229] 9pnet_fd: Insufficient options for proto=fd 03:54:59 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x8, 0x3) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r6, 0x0) getresuid(&(0x7f00000018c0), &(0x7f0000001900)=0x0, &(0x7f0000001940)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001980)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000001a80)=0xe8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1, &(0x7f0000001ac0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@cache_mmap}], [{@fowner_gt={'fowner>', r3}}, {@euid_lt={'euid<', r6}}, {@uid_lt={'uid<', r7}}, {@seclabel}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '%)'}}, {@fowner_lt={'fowner<', r8}}, {@fowner_gt={'fowner>', r9}}]}}) setresuid(0x0, r4, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x85000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_9p2000}, {@cache_none}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@fowner_lt={'fowner<', r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>', r10}}, {@smackfsdef={'smackfsdef', 0x3d, ',$-'}}]}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:54:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 51) [ 799.394726] loop4: detected capacity change from 0 to 4 [ 799.398194] FAULT_INJECTION: forcing a failure. [ 799.398194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.399169] CPU: 1 UID: 0 PID: 7053 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 799.399186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 799.399194] Call Trace: [ 799.399199] [ 799.399204] dump_stack_lvl+0xfa/0x120 [ 799.399230] should_fail_ex+0x4d7/0x5e0 [ 799.399253] strncpy_from_user+0x3b/0x2f0 [ 799.399271] getname_flags.part.0+0x8d/0x540 [ 799.399286] __x64_sys_mkdir+0xdb/0x140 [ 799.399303] do_syscall_64+0xbf/0x390 [ 799.399321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.399335] RIP: 0033:0x7fb507509c27 [ 799.399345] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 799.399357] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 799.399369] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb507509c27 [ 799.399378] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 799.399385] RBP: 00007fb504a80040 R08: 0000000000000000 R09: ffffffffffffffff [ 799.399393] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 799.399400] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 799.399416] 03:55:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:55:08 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) 03:55:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:08 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x16}, "c029a0b1e82f1116777fedf6f5e9ed1a41e4e1656d6b"}, 0x1a) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x79}, "2d9924b358f9ad4ffc2f081c5e16f28c688ba1e4c756768a3047bf23d4f26cb6c9f3b45b14259464c106add443934256fc17b9d7ea0da071c5c7d6e1470f322bba4bf670bc560eeac11a2056e124dc7b89a4a6b5607e6de68443423faced736db1226eff470018a5a634ffadfe39e29dcd27f5cf6aeb423ab2"}}, 0x7c) 03:55:08 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x40}, "a024ac351feed07d6ef3f60d3b9703e8bd2a600c67fe7a51a83b54afc0dce1016a8268a62225c13d750f12d12fd5b3e406efdb0e382cc42dffe593a5e168059f"}, 0x44) 03:55:08 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb", 0x30) 03:55:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 52) 03:55:08 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:08 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x0, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:55:08 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x1b}, {0x20, 0x4, [{0xc9, 0x4, 0x2}, {0xc9, 0x101, 0xf32}, {0xc9, 0x8, 0x1f}, {0xc8, 0x4c, 0x8c1}]}}}, 0x1e) [ 807.975839] No source specified [ 807.981020] loop4: detected capacity change from 0 to 4 [ 807.981029] 9pnet_fd: Insufficient options for proto=fd [ 807.985061] No source specified [ 807.997356] EXT4-fs: Mount option(s) incompatible with ext2 03:55:08 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) 03:55:08 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:08 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) 03:55:08 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0x60) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 808.089607] 9pnet_fd: Insufficient options for proto=fd 03:55:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xef08000000000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 808.245131] No source specified [ 808.251534] No source specified 03:55:19 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:19 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:55:19 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:19 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd", 0x19) 03:55:19 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x3b) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x32, 0xa}, {0x20, 0x5a1, 0x9, 0x4000, 0x4}}}}, 0x17) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:55:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 53) 03:55:19 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x40, 0x1, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:55:19 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:55:19 executing program 6: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 819.239382] loop4: detected capacity change from 0 to 4 [ 819.258973] EXT4-fs: Mount option(s) incompatible with ext2 [ 819.269696] No source specified [ 819.273661] No source specified 03:55:19 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:55:19 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c8105500510001000a080200ee000cff0500f8ffff030603040800090006000000ffff0b7f1c0001800100c32857a0f187c468497d3af39273283166d91e3096c714e00e26030009001f0107020007000c05050000808d091f"], 0x5a) 03:55:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 54) 03:55:19 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xf9fdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:55:19 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd", 0x19) 03:55:19 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x3, @any, 0x3}}}, 0xb) 03:55:19 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 819.529672] loop4: detected capacity change from 0 to 4 [ 819.534465] FAULT_INJECTION: forcing a failure. [ 819.534465] name failslab, interval 1, probability 0, space 0, times 0 [ 819.536469] CPU: 1 UID: 0 PID: 7146 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 819.536502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 819.536515] Call Trace: [ 819.536522] [ 819.536531] dump_stack_lvl+0xfa/0x120 [ 819.536567] should_fail_ex+0x4d7/0x5e0 [ 819.536607] ? __d_alloc+0x31/0xa10 [ 819.536635] should_failslab+0xc2/0x120 [ 819.536667] kmem_cache_alloc_lru_noprof+0x76/0x680 [ 819.536691] ? __d_lookup+0x255/0x490 [ 819.536721] ? __d_alloc+0x31/0xa10 [ 819.536748] __d_alloc+0x31/0xa10 [ 819.536782] d_alloc+0x4a/0x1e0 [ 819.536814] lookup_one_qstr_excl+0x174/0x270 [ 819.536835] ? mnt_want_write+0x153/0x420 [ 819.536858] filename_create+0x1ca/0x480 [ 819.536885] ? __pfx_filename_create+0x10/0x10 [ 819.536909] ? __virt_addr_valid+0x2e8/0x5d0 [ 819.536958] do_mkdirat+0x9a/0x3d0 [ 819.537007] ? __pfx_do_mkdirat+0x10/0x10 [ 819.537046] __x64_sys_mkdir+0xf3/0x140 [ 819.537076] do_syscall_64+0xbf/0x390 [ 819.537114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.537137] RIP: 0033:0x7fb507509c27 [ 819.537155] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 819.537176] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 819.537198] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb507509c27 [ 819.537214] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 819.537227] RBP: 00007fb504a80040 R08: 0000000000000000 R09: ffffffffffffffff [ 819.537241] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 819.537255] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 819.537286] [ 819.577917] No source specified [ 819.583593] No source specified 03:55:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 55) 03:55:31 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:31 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:55:31 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_reconf_req={{0x19, 0x7, 0x16}, {0xfff, 0x8, [0x7, 0x8000, 0x7, 0xff80, 0x6, 0x4, 0x2, 0x1, 0x6]}}}}, 0x23) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x84}, "3de24a34250dc376773d7287dd304803006cfdca5b9ee47cb0490b1b3c910911df64acc6013e82d5910badefb16abc8492eaae8755f27e4871530d07b1d0883d58263c2f59029393cd4d168b822aaa3822a52de634d5daa9f1d55e804e7e036c261f5e635fbb69c9ee162bb5e1b2c337ca96561a8115d2a6ddf5665f8f329dde9609b3bc"}, 0x88) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:55:31 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd", 0x19) 03:55:31 executing program 7: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd", 0x19) 03:55:31 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f00000001c0)={[{0x6e, 0x4e00, "f10ecd84eedf324388a3f91327ffc0d23befbc017c2649681cdeddb445167bd6a13dbf7eb5dff231c04123aeb719a85deb25e6cf1a4100717f8d2cd1fc38153848dbc91004dec44ee7e137b90f60fe80efd8f8d8869c0975ced85c5ce870d240970d7922a845f84ed012a733cb7a"}, {0x2f, 0x4e00, "f415611ad1f011b6ec25f587f5393ea051b44456a4435baa8e70d617d8005ae6628cf181bc87c4044b71213b7647cf"}]}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 831.706399] loop4: detected capacity change from 0 to 4 [ 831.724226] EXT4-fs: Mount option(s) incompatible with ext2 [ 831.760039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 03:55:32 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 831.769597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.771862] No source specified [ 831.785618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.791511] No source specified 03:55:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 56) [ 831.802459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:55:32 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x2, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 831.890272] loop4: detected capacity change from 0 to 4 03:55:32 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x99}, "a24ee11788284fad8ff86aa9ea8ee0343b098ffe107a80c2fee76696c452d5b54677529bc2353c6ed115773c43e61c8078b1673abb9d887ec53dc16c698b55f73256d1f5b734ef5c99429f66e7c4da758dc6a3ef73b3ecd85e8d077420ed27272dafa38d6dab480fa94ee6dd3274ef5a8a34d87a2415578fbac5c442aac8bc470e71e4177cfc7f0703cc21bde23e65a484f65f7b7020a6e592"}, 0x9d) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4b, 0xc9}}}, 0x5) [ 831.893517] FAULT_INJECTION: forcing a failure. [ 831.893517] name failslab, interval 1, probability 0, space 0, times 0 [ 831.894641] CPU: 0 UID: 0 PID: 7187 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 831.894660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 831.894668] Call Trace: [ 831.894672] [ 831.894678] dump_stack_lvl+0xfa/0x120 [ 831.894702] should_fail_ex+0x4d7/0x5e0 [ 831.894726] ? jbd2__journal_start+0x193/0x6b0 [ 831.894741] should_failslab+0xc2/0x120 [ 831.894761] kmem_cache_alloc_noprof+0x72/0x680 [ 831.894775] ? lock_is_held_type+0x9e/0x120 [ 831.894792] ? lock_is_held_type+0x9e/0x120 [ 831.894809] ? jbd2__journal_start+0x193/0x6b0 [ 831.894822] ? __cond_resched+0x4c/0x80 [ 831.894835] jbd2__journal_start+0x193/0x6b0 [ 831.894851] __ext4_journal_start_sb+0x325/0x5d0 [ 831.894875] __ext4_new_inode+0x2cbe/0x4d70 [ 831.894902] ? __pfx___ext4_new_inode+0x10/0x10 [ 831.894922] ? __pfx_avc_has_perm+0x10/0x10 [ 831.894939] ? __pfx___dquot_initialize+0x10/0x10 [ 831.894968] ext4_mkdir+0x331/0xb30 [ 831.894988] ? __pfx_ext4_mkdir+0x10/0x10 [ 831.895000] ? security_inode_permission+0x72/0xe0 [ 831.895019] vfs_mkdir+0x59a/0x8d0 [ 831.895037] do_mkdirat+0x19f/0x3d0 [ 831.895055] ? __pfx_do_mkdirat+0x10/0x10 [ 831.895078] __x64_sys_mkdir+0xf3/0x140 [ 831.895100] do_syscall_64+0xbf/0x390 [ 831.895119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.895134] RIP: 0033:0x7fb507509c27 [ 831.895145] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 831.895158] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 831.895171] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb507509c27 [ 831.895180] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 831.895188] RBP: 00007fb504a80040 R08: 0000000000000000 R09: ffffffffffffffff [ 831.895197] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 831.895205] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 831.895222] [ 831.911900] EXT4-fs error (device sda) in __ext4_new_inode:1086: Out of memory 03:55:32 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e", 0x2) [ 832.005394] No source specified [ 832.012569] No source specified 03:55:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 57) 03:55:32 executing program 7: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd", 0x19) [ 832.063072] loop4: detected capacity change from 0 to 4 [ 832.071917] EXT4-fs: Mount option(s) incompatible with ext2 [ 832.328025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.329275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.331785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.333081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:55:43 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@none, 0x7f, 0x81, 0x6, "519980", 0x3f, 0x7}, {@any, 0x3f, 0x2, 0x1, "d1a7e2", 0x101, 0xff}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff, 0x7, 0x4, "8d6a33", 0xfff9, 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc0, 0x6, 0x0, 'y)O', 0x1ff}]}}}, 0x40) 03:55:43 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:43 executing program 0: r0 = creat(0x0, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:43 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e", 0x2) 03:55:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x3, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:55:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 58) 03:55:43 executing program 7: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd", 0x19) 03:55:43 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0a00040c000000000000063ea3b4df54594fce435a8d0899b979b4e2d1a5df84e7cfc8d46bc6ca9c878b439f094ca6d983b9b9ed88c3ec4ea436f3909ece9b311b62ebe35569"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="03c800cfae04f5a59de51e862da3f59edea02d7be7f7c6cf54768b7ddc8a0d5feaff7a55068b8dd52b950b0362e7aa4a1d99f2c1db523a394cadd820e42d3eac6a3e5b424ce80b15c72fb925b43b3777e18c2602d3c286517efa919d641ea3ef9ce069d3591df87b40583426e584b927a9c0c4ce2361e3ee0ff59c380bf0addd06b2e6aeea58d304599b170f21729663a6c9b87c07c0a188f95bde63e2b1ba554399738385f5a0ac9cedc275f4e35eb95ba92e7b9d80a6f05732a32bffb811da82a8bfd158513c59d2fec40193a15b16974851d83afc4d0300f50612eb0f3af4"], 0xd3) [ 843.644808] No source specified [ 843.651960] No source specified [ 843.660496] loop4: detected capacity change from 0 to 4 [ 843.666661] FAULT_INJECTION: forcing a failure. [ 843.666661] name failslab, interval 1, probability 0, space 0, times 0 [ 843.668306] CPU: 0 UID: 0 PID: 7215 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 843.668334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 843.668347] Call Trace: [ 843.668354] [ 843.668363] dump_stack_lvl+0xfa/0x120 [ 843.668400] should_fail_ex+0x4d7/0x5e0 [ 843.668437] ? ext4_alloc_inode+0x28/0x600 [ 843.668469] should_failslab+0xc2/0x120 [ 843.668501] kmem_cache_alloc_lru_noprof+0x76/0x680 [ 843.668531] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 843.668565] ? ext4_alloc_inode+0x28/0x600 [ 843.668595] ext4_alloc_inode+0x28/0x600 [ 843.668626] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 843.668657] alloc_inode+0x67/0x250 [ 843.668690] new_inode+0x1e/0x160 [ 843.668723] __ext4_new_inode+0x35d/0x4d70 [ 843.668761] ? avc_has_perm_noaudit+0x150/0x3d0 [ 843.668792] ? __pfx___ext4_new_inode+0x10/0x10 [ 843.668823] ? __pfx_avc_has_perm+0x10/0x10 [ 843.668847] ? __pfx___dquot_initialize+0x10/0x10 [ 843.668893] ext4_mkdir+0x331/0xb30 [ 843.668923] ? __pfx_ext4_mkdir+0x10/0x10 [ 843.668942] ? security_inode_permission+0x72/0xe0 [ 843.668972] vfs_mkdir+0x59a/0x8d0 [ 843.668999] do_mkdirat+0x19f/0x3d0 [ 843.669029] ? __pfx_do_mkdirat+0x10/0x10 [ 843.669064] __x64_sys_mkdir+0xf3/0x140 [ 843.669100] do_syscall_64+0xbf/0x390 [ 843.669130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.669152] RIP: 0033:0x7fb507509c27 [ 843.669169] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 843.669189] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 843.669209] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb507509c27 [ 843.669224] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 843.669236] RBP: 00007fb504a80040 R08: 0000000000000000 R09: ffffffffffffffff [ 843.669250] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 843.669262] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 843.669329] 03:55:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x4, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:55:44 executing program 0: r0 = creat(0x0, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:44 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="f8dcf49070cfe4724ad2b14b0b49f49f7cc0"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}}}}, 0xf) [ 843.897670] No source specified [ 843.902474] No source specified 03:55:44 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x7f}}}, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x59}, @l2cap_cid_signaling={{0x55}, [@l2cap_conn_rsp={{0x3, 0xc8, 0x8}, {0x401, 0x800, 0x5, 0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xb5, 0x2}, {0x4}}, @l2cap_conf_rsp={{0x5, 0x4d, 0x25}, {0x4525, 0x0, 0x0, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6, 0x3, 0x20, 0x5, 0x2}}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x945}, @l2cap_conf_ews={0x7, 0x2, 0x1ff}, @l2cap_conf_mtu={0x1, 0x2, 0x3}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_disconn_req={{0x6, 0xfb, 0x4}, {0x2b, 0x1}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x8, 0x9, 0x0, 0xfff}}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}}]}}, 0x5e) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xea}, @l2cap_cid_signaling={{0xe6}, [@l2cap_info_rsp={{0xb, 0x3, 0xe2}, {0x7d, 0xa, "3cb397d42657e54e03f8b7c14136a874e78f7fa32b7aab3c94569f2d8cc6ba4d7a80682f2a828bd785f07930ee401c4da7fe092853bb660524cc78108d42251b65926ccc836d465f30358b89d7a94a689052959e1d9f764ae922b164f03bf4e7c0c106ea68d4cf3f6ced6d029f808ee7ccfa4c6bf12273596786ebefbe02fdd1d8d099a710e8457711c939cf98b33f124081a146a0e1e6c3a4cf6e6e7c67da6b7c9d9afa425c679035f9ca5d983ec43bfe6d4dcca772cc319be9361b981960d06a0398311301a788a583094f9f697b53787f6a3a97f189a751f6d6e2e20e"}}]}}, 0xef) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 03:55:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 59) 03:55:44 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e", 0x2) 03:55:44 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:44 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 844.013737] loop4: detected capacity change from 0 to 4 [ 844.020717] FAULT_INJECTION: forcing a failure. [ 844.020717] name failslab, interval 1, probability 0, space 0, times 0 [ 844.022747] CPU: 1 UID: 0 PID: 7241 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 844.022778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 844.022792] Call Trace: [ 844.022799] [ 844.022808] dump_stack_lvl+0xfa/0x120 [ 844.022845] should_fail_ex+0x4d7/0x5e0 [ 844.022885] ? security_inode_alloc+0x3e/0x130 [ 844.022922] should_failslab+0xc2/0x120 [ 844.022955] kmem_cache_alloc_noprof+0x72/0x680 [ 844.022977] ? __pfx_map_id_range_down+0x10/0x10 03:55:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x5, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 844.023013] ? security_inode_alloc+0x3e/0x130 [ 844.023047] security_inode_alloc+0x3e/0x130 [ 844.023093] inode_init_always_gfp+0xc94/0xff0 [ 844.023127] alloc_inode+0x8d/0x250 [ 844.023161] new_inode+0x1e/0x160 [ 844.023197] __ext4_new_inode+0x35d/0x4d70 [ 844.023237] ? avc_has_perm_noaudit+0x150/0x3d0 [ 844.023269] ? __pfx___ext4_new_inode+0x10/0x10 [ 844.023303] ? __pfx_avc_has_perm+0x10/0x10 [ 844.023328] ? __pfx___dquot_initialize+0x10/0x10 [ 844.023377] ext4_mkdir+0x331/0xb30 [ 844.023409] ? __pfx_ext4_mkdir+0x10/0x10 [ 844.023429] ? security_inode_permission+0x72/0xe0 [ 844.023460] vfs_mkdir+0x59a/0x8d0 [ 844.023488] do_mkdirat+0x19f/0x3d0 [ 844.023519] ? __pfx_do_mkdirat+0x10/0x10 [ 844.023557] __x64_sys_mkdir+0xf3/0x140 03:55:44 executing program 6: syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x0, 0x3, 0x131}, @l2cap_cid_signaling={{0x12d}, [@l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x7, 0x9, 0x4, 0x8000}}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x1}}, @l2cap_conf_req={{0x4, 0x8, 0x16}, {0x8, 0xfffb, [@l2cap_conf_efs={0x6, 0x10, {0x7f, 0x0, 0x8, 0x0, 0x80000000, 0x3}}]}}, @l2cap_create_chan_rsp={{0xd, 0xf1, 0x8}, {0x1000, 0xeff, 0x6, 0xffff}}, @l2cap_conf_rsp={{0x5, 0x80, 0x2f}, {0x3, 0x7, 0x2, [@l2cap_conf_efs={0x6, 0x10, {0x90, 0x0, 0x3a8, 0x8, 0x6, 0x80000000}}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_flushto={0x2, 0x2, 0x7}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x392}, @l2cap_conf_mtu={0x1, 0x2, 0x7f}, @l2cap_conf_mtu={0x1, 0x2, 0xfbff}]}}, @l2cap_info_rsp={{0xb, 0x7f, 0xbe}, {0xfff, 0xb5e, "c97fc72d1243758e7713f14f9a549e30301cc55332ea8e7eb4e67b4b592b08cc4e4ab9717d803f8d22062af77727bd81e1d590a9652722132c1f877d27cf6868d642deae59edfd57ca1a82980d97e09a94669451b36a65b6d8be2f9cb0def310c9d791a72dc9b2f76905e4ed0102dd75e40d5228a7cfd3b66f86ca7ba46307f8808ddbd0af32f50dd18950951a666232d2b10838e87bf4f12124817d4b86a85135d03a64f7cf5a1226aaaa4d33231775b34866f8d1fc13a6c83e"}}]}}, 0x136) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 844.023587] do_syscall_64+0xbf/0x390 [ 844.023619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.023643] RIP: 0033:0x7fb507509c27 [ 844.023661] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 844.023682] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 844.023704] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb507509c27 [ 844.023719] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 844.023733] RBP: 00007fb504a80040 R08: 0000000000000000 R09: ffffffffffffffff [ 844.023747] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 844.023761] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 844.023791] 03:55:44 executing program 0: r0 = creat(0x0, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:44 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{}, {0x8, 0xc8, 0x81}}}, 0x1e) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 844.159607] No source specified [ 844.188484] No source specified 03:55:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 60) 03:55:54 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:55:54 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="b927c84e60060040e409050006"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:55:54 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x6, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:55:54 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240), 0x0) 03:55:54 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdjo=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:55:54 executing program 7: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e", 0x2) 03:55:54 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 854.699562] loop4: detected capacity change from 0 to 4 [ 854.700944] No source specified [ 854.708417] No source specified [ 854.710264] FAULT_INJECTION: forcing a failure. [ 854.710264] name failslab, interval 1, probability 0, space 0, times 0 [ 854.711641] CPU: 0 UID: 0 PID: 7278 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 854.711663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 854.711672] Call Trace: [ 854.711678] [ 854.711684] dump_stack_lvl+0xfa/0x120 [ 854.711713] should_fail_ex+0x4d7/0x5e0 [ 854.711742] ? security_inode_alloc+0x3e/0x130 [ 854.711767] should_failslab+0xc2/0x120 [ 854.711791] kmem_cache_alloc_noprof+0x72/0x680 [ 854.711807] ? __pfx_map_id_range_down+0x10/0x10 [ 854.711834] ? security_inode_alloc+0x3e/0x130 [ 854.711857] security_inode_alloc+0x3e/0x130 [ 854.711883] inode_init_always_gfp+0xc94/0xff0 [ 854.711908] alloc_inode+0x8d/0x250 [ 854.711932] new_inode+0x1e/0x160 [ 854.711957] __ext4_new_inode+0x35d/0x4d70 [ 854.711986] ? avc_has_perm_noaudit+0x150/0x3d0 [ 854.712009] ? __pfx___ext4_new_inode+0x10/0x10 [ 854.712033] ? __pfx_avc_has_perm+0x10/0x10 [ 854.712050] ? __pfx___dquot_initialize+0x10/0x10 [ 854.712091] ext4_mkdir+0x331/0xb30 [ 854.712114] ? __pfx_ext4_mkdir+0x10/0x10 [ 854.712129] ? security_inode_permission+0x72/0xe0 [ 854.712150] vfs_mkdir+0x59a/0x8d0 [ 854.712170] do_mkdirat+0x19f/0x3d0 [ 854.712193] ? __pfx_do_mkdirat+0x10/0x10 [ 854.712220] __x64_sys_mkdir+0xf3/0x140 [ 854.712241] do_syscall_64+0xbf/0x390 [ 854.712264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.712281] RIP: 0033:0x7fb507509c27 [ 854.712293] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 854.712308] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 854.712324] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb507509c27 [ 854.712334] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 854.712344] RBP: 00007fb504a80040 R08: 0000000000000000 R09: ffffffffffffffff [ 854.712354] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 854.712364] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 854.712386] 03:55:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x7, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:55:55 executing program 6: ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000000c0)=""/23) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x7, 0x8}, {0xfffd, 0x100, 0x5, 0x81}}}}, 0x15) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r0], 0x14) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT, 0x4) 03:55:55 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c800bfe2e7a38896ff4642296627fdd2359144a543fe0b86f33759969cd6613b578338e422702f91ca61372ba90c43ec08ffe11a65c94e656f0847eed98c54e91952040000004a64e3624d5d6d12f1d4f86ba7be0f823ab56564914fcefcc8899fdd912b5dd807a115865c52915d5f0fa4adcf57590a2e25f316229c42be530ad7b81113854206088ca4fc0a1c2ef55d99460ccfe6475e69b033035c95381162af8aa54ea1fe90711332125cb79d1555f36670022285e35fcbe6962d017bf8ffc6854b"], 0xc3) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd4}, "c772f56860a43e387cd3b51574ca03e2c42f10cf6bed598f0f5343a40334d897fa6425b513a56730200c90a870995a80d0361cf4a77c75724e7753b76a9e8069cbd7f865646043a5351f4d2b41e46f3a648bde39d884551b1d179c29eacca705d84a068a6b510290b75eab30217d5a7a6a00af329299722a8ea214068ee9d0cb96bafa3f71c163a1e02d3283bcb07a101539a178c4190b8a4f220970855407a8c4ea436021180e3495954a32ec18924cd242d10bb6cd2bd4a9d4cb96220936bb1151df86796b74c1385e18fde9ee225d9a0afd9f"}, 0xd8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="03c80027aa038a232e032226ba1d5252d366ac7089cb828b887e8012aa05000000000000001d485649d2b4"], 0x2b) [ 854.821879] No source specified [ 854.825518] No source specified 03:55:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 61) [ 854.906892] loop4: detected capacity change from 0 to 4 [ 854.912308] EXT4-fs: Mount option(s) incompatible with ext2 03:56:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x8, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:04 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xa7, 0x2}, {0x8}}}}, 0xf) 03:56:04 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:04 executing program 7: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec7e", 0x2) 03:56:04 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:04 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240), 0x0) 03:56:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 62) 03:56:04 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 864.772283] No source specified [ 864.773604] No source specified [ 864.805697] loop4: detected capacity change from 0 to 4 [ 864.823354] EXT4-fs: Mount option(s) incompatible with ext2 03:56:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:05 executing program 6: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0a0060200040e409050006a7360f19d58118d8f6bfa9cf8e6a489d91d0760b10661cf477baf507fbf65eff369976d0b2532d5f0b6807b2f4cd4e98b0d5ba78604328180ce73e7eaa01ff1b6b0f65"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x46}, "2f96efea64f0f2ac2b50b1b08647315e4a47de0a0ab7b5147b4dd7f8d08ccb75b3a416eeca48161c3840cc5681948ad365984549b2594d8afd960440b4434e8ca359cae927f0"}, 0x4a) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdf}, "776482234c67bcddcc07ffe237251a15237395ad0ef1a1b1586691761a2d21524697da2bc9bdbc2cedf5e5dbe211df0ed7c2d3427d40ae9c10492286e07ba32a9d79de29d7068f6ab5a566d6f6cf6600ffba694b5831cf28b54f9566f36de395e66b8060b710316ea4398a358e5b1d27772054864a79f8022a0a1750fbff1552972510c142141e4f83fed83dddf9e260d4136aee694c2803d11132cc9ef7113518c137b1e049d975a63c6eb52d6d2436f080fcb9d4a4862d533257280db03fe4535e8c692535527bdf28e7ae6798cb3112bd4a1427475fe847d8c08b856778"}, 0xe3) [ 864.892698] No source specified [ 864.897926] No source specified 03:56:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 63) 03:56:05 executing program 2: ptrace$peeksig(0x4209, 0x0, &(0x7f00000000c0)={0x1, 0x1, 0x6}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}]) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a0060008140e409050006"], 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:56:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x300, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:05 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x3, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 864.969423] loop4: detected capacity change from 0 to 4 [ 864.974929] FAULT_INJECTION: forcing a failure. [ 864.974929] name failslab, interval 1, probability 0, space 0, times 0 [ 864.975832] CPU: 0 UID: 0 PID: 7337 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 864.975849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.975855] Call Trace: [ 864.975860] [ 864.975865] dump_stack_lvl+0xfa/0x120 [ 864.975889] should_fail_ex+0x4d7/0x5e0 [ 864.975911] should_failslab+0xc2/0x120 [ 864.975929] __kmalloc_node_track_caller_noprof+0xc1/0x760 [ 864.975948] ? lock_acquire+0x15e/0x2f0 [ 864.975963] ? sidtab_sid2str_get+0x85/0x6f0 [ 864.975974] ? sidtab_sid2str_get+0x17e/0x6f0 [ 864.975988] ? kmemdup_noprof+0x2b/0x60 [ 864.976000] kmemdup_noprof+0x2b/0x60 [ 864.976012] sidtab_sid2str_get+0x17e/0x6f0 [ 864.976025] sidtab_entry_to_string+0x33/0x110 [ 864.976045] security_sid_to_context_core+0x350/0x620 [ 864.976065] selinux_inode_init_security+0x433/0x650 [ 864.976090] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 864.976108] ? trace_kmalloc+0x1f/0xb0 [ 864.976124] ? current_umask+0x12/0x80 [ 864.976141] ? security_inode_init_security+0x13d/0x390 [ 864.976162] security_inode_init_security+0x1e6/0x390 [ 864.976178] ? __pfx_ext4_initxattrs+0x10/0x10 [ 864.976191] ? __pfx_security_inode_init_security+0x10/0x10 [ 864.976209] ? crc32c+0x1ae/0x350 [ 864.976227] __ext4_new_inode+0x3452/0x4d70 [ 864.976252] ? __pfx___ext4_new_inode+0x10/0x10 [ 864.976271] ? __pfx___dquot_initialize+0x10/0x10 [ 864.976296] ext4_mkdir+0x331/0xb30 [ 864.976313] ? __pfx_ext4_mkdir+0x10/0x10 [ 864.976324] ? security_inode_permission+0x72/0xe0 [ 864.976340] vfs_mkdir+0x59a/0x8d0 [ 864.976355] do_mkdirat+0x19f/0x3d0 [ 864.976371] ? __pfx_do_mkdirat+0x10/0x10 [ 864.976390] __x64_sys_mkdir+0xf3/0x140 [ 864.976406] do_syscall_64+0xbf/0x390 [ 864.976422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.976435] RIP: 0033:0x7fb507509c27 [ 864.976444] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.976455] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 864.976466] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb507509c27 [ 864.976474] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 864.976480] RBP: 00007fb504a80040 R08: 0000000000000000 R09: ffffffffffffffff [ 864.976487] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 864.976494] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 864.976510] 03:56:05 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 865.031765] No source specified [ 865.036290] No source specified 03:56:05 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:05 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240), 0x0) 03:56:05 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 64) 03:56:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x0, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x20, 0xa}, {0x8000, 0x4, 0x6, 0x1a, 0xcd1}}}}, 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x81, 0xc9, "3afb8472c170b81f"}}}, 0xe) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:56:15 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:15 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) 03:56:15 executing program 6: syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xf3}, "4f4c90dc7fd6f3f5a67c9aa434c0ce02b0f72ae1193cebdb3a95f81e365f7a9c39524b239ac99077d386c6b87e17bb5bd4382763a68f40abde7a748bcf3b6d23e0c45e728cd1105ae3976a93a8b5073ab36f0cb9278226ffebf247a8af91b2584ab14ff5f4a4d501f8373cd00ebbaebce1093bd6efe1de115a6d44f6223030a16a25979e4e39dbe7acc2a923c9f71008a110c26c489f6156e1fd4c5aa42c6783398b25e70212a6e0b4e0c23df8adba1c19f3801bcf0024d35ee7f13b046781acb656433745451bf699508a241d4118fdca3e688e29a5b79e4966875f8334891456f99a0295f8d79a19703ee175df10be025021"}, 0xf7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:56:15 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x500, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:15 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 874.859328] loop4: detected capacity change from 0 to 4 [ 874.863396] FAULT_INJECTION: forcing a failure. [ 874.863396] name failslab, interval 1, probability 0, space 0, times 0 [ 874.864318] CPU: 0 UID: 0 PID: 7368 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 874.864334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 874.864341] Call Trace: [ 874.864346] [ 874.864350] dump_stack_lvl+0xfa/0x120 [ 874.864374] should_fail_ex+0x4d7/0x5e0 [ 874.864396] should_failslab+0xc2/0x120 [ 874.864415] __kmalloc_noprof+0xc8/0x760 [ 874.864435] ? current_umask+0x12/0x80 [ 874.864451] ? posix_acl_create.part.0+0x2a0/0x480 [ 874.864465] ? security_inode_init_security+0x13d/0x390 [ 874.864486] ? security_inode_init_security+0x13d/0x390 [ 874.864502] security_inode_init_security+0x13d/0x390 [ 874.864518] ? __pfx_ext4_initxattrs+0x10/0x10 [ 874.864531] ? __pfx_security_inode_init_security+0x10/0x10 [ 874.864549] ? crc32c+0x1ae/0x350 [ 874.864567] __ext4_new_inode+0x3452/0x4d70 [ 874.864592] ? __pfx___ext4_new_inode+0x10/0x10 [ 874.864611] ? __pfx___dquot_initialize+0x10/0x10 [ 874.864636] ext4_mkdir+0x331/0xb30 [ 874.864653] ? __pfx_ext4_mkdir+0x10/0x10 [ 874.864663] ? security_inode_permission+0x72/0xe0 [ 874.864679] vfs_mkdir+0x59a/0x8d0 [ 874.864694] do_mkdirat+0x19f/0x3d0 [ 874.864710] ? __pfx_do_mkdirat+0x10/0x10 [ 874.864729] __x64_sys_mkdir+0xf3/0x140 [ 874.864745] do_syscall_64+0xbf/0x390 [ 874.864762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.864774] RIP: 0033:0x7fb507509c27 [ 874.864784] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 874.864795] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 874.864806] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb507509c27 [ 874.864814] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 874.864821] RBP: 00007fb504a80040 R08: 0000000000000000 R09: ffffffffffffffff [ 874.864828] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 874.864835] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 874.864851] [ 874.902631] No source specified [ 874.912851] No source specified 03:56:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 65) 03:56:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x600, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:15 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:15 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040552f0"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x0, 0xc8}}}, 0x5) 03:56:15 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) [ 875.023068] loop4: detected capacity change from 0 to 4 [ 875.033777] EXT4-fs: Mount option(s) incompatible with ext2 03:56:15 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2f}, "6b8d8f9f397ee27fc6e3c6e5a1d1cc4c54ba070060fb3e08ec24f4a1f0b5e3d01706ec4611ecf762126412a7940bc6"}, 0x33) [ 875.053625] No source specified [ 875.056515] No source specified 03:56:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x700, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 66) 03:56:15 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 875.157559] loop4: detected capacity change from 0 to 4 [ 875.160650] FAULT_INJECTION: forcing a failure. [ 875.160650] name failslab, interval 1, probability 0, space 0, times 0 [ 875.162432] CPU: 0 UID: 0 PID: 7399 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 875.162448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 875.162455] Call Trace: [ 875.162460] [ 875.162465] dump_stack_lvl+0xfa/0x120 [ 875.162489] should_fail_ex+0x4d7/0x5e0 [ 875.162511] should_failslab+0xc2/0x120 [ 875.162529] __kmalloc_node_track_caller_noprof+0xc1/0x760 [ 875.162545] ? lock_acquire+0x15e/0x2f0 [ 875.162560] ? sidtab_sid2str_get+0x85/0x6f0 [ 875.162572] ? sidtab_sid2str_get+0x17e/0x6f0 [ 875.162586] ? kmemdup_noprof+0x2b/0x60 [ 875.162598] kmemdup_noprof+0x2b/0x60 [ 875.162610] sidtab_sid2str_get+0x17e/0x6f0 [ 875.162623] sidtab_entry_to_string+0x33/0x110 [ 875.162643] security_sid_to_context_core+0x350/0x620 [ 875.162663] selinux_inode_init_security+0x433/0x650 [ 875.162685] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 875.162703] ? trace_kmalloc+0x1f/0xb0 [ 875.162719] ? current_umask+0x12/0x80 [ 875.162736] ? security_inode_init_security+0x13d/0x390 [ 875.162757] security_inode_init_security+0x1e6/0x390 [ 875.162774] ? __pfx_ext4_initxattrs+0x10/0x10 [ 875.162786] ? __pfx_security_inode_init_security+0x10/0x10 [ 875.162805] ? crc32c+0x1ae/0x350 [ 875.162823] __ext4_new_inode+0x3452/0x4d70 [ 875.162848] ? __pfx___ext4_new_inode+0x10/0x10 [ 875.162866] ? __pfx___dquot_initialize+0x10/0x10 [ 875.162892] ext4_mkdir+0x331/0xb30 [ 875.162909] ? __pfx_ext4_mkdir+0x10/0x10 [ 875.162920] ? security_inode_permission+0x72/0xe0 [ 875.162936] vfs_mkdir+0x59a/0x8d0 [ 875.162951] do_mkdirat+0x19f/0x3d0 [ 875.162968] ? __pfx_do_mkdirat+0x10/0x10 [ 875.162987] __x64_sys_mkdir+0xf3/0x140 [ 875.163003] do_syscall_64+0xbf/0x390 [ 875.163020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.163033] RIP: 0033:0x7fb507509c27 [ 875.163042] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 875.163053] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 875.163065] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb507509c27 [ 875.163073] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 875.163085] RBP: 00007fb504a80040 R08: 0000000000000000 R09: ffffffffffffffff [ 875.163092] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 875.163100] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 875.163116] [ 875.209759] No source specified [ 875.210523] No source specified 03:56:25 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:25 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:56:25 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) 03:56:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:56:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x8ef, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 67) 03:56:25 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:56:25 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 885.481014] No source specified [ 885.505929] No source specified [ 885.542517] loop4: detected capacity change from 0 to 4 [ 885.547385] EXT4-fs: Mount option(s) incompatible with ext2 03:56:25 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 68) 03:56:25 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240), 0x0) 03:56:25 executing program 6: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:56:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x1020, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:25 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 885.784043] loop4: detected capacity change from 0 to 4 [ 885.815705] EXT4-fs: Mount option(s) incompatible with ext2 03:56:26 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 885.859010] No source specified [ 885.873627] No source specified 03:56:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x2000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:37 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:37 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:37 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240), 0x0) 03:56:37 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 69) 03:56:37 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:37 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 897.376296] No source specified [ 897.377993] No source specified [ 897.415577] loop4: detected capacity change from 0 to 4 03:56:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x2010, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 897.440950] EXT4-fs: Mount option(s) incompatible with ext2 03:56:37 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY={{0xef}, 0x92}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 897.495649] No source specified [ 897.498583] No source specified 03:56:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xedc0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 70) [ 897.594191] No source specified [ 897.599541] No source specified 03:56:37 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) [ 897.713776] loop4: detected capacity change from 0 to 4 [ 897.736574] EXT4-fs: Mount option(s) incompatible with ext2 [ 897.766402] 9pnet_fd: Insufficient options for proto=fd 03:56:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xef08, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:47 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240), 0x0) 03:56:47 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:47 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:47 executing program 6: ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)={0x76, "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"}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x0, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:56:47 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2182, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 71) 03:56:47 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:47 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 907.575761] No source specified [ 907.579634] No source specified [ 907.593635] loop4: detected capacity change from 0 to 4 [ 907.602870] 9pnet_fd: Insufficient options for proto=fd [ 907.607059] EXT4-fs: Mount option(s) incompatible with ext2 03:56:47 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:47 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 907.703575] No source specified [ 907.709137] No source specified 03:56:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 72) 03:56:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xe0ffff, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 907.830514] No source specified [ 907.835596] No source specified 03:56:48 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:48 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:48 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 907.890921] loop4: detected capacity change from 0 to 4 [ 907.898047] FAULT_INJECTION: forcing a failure. [ 907.898047] name failslab, interval 1, probability 0, space 0, times 0 [ 907.900165] CPU: 1 UID: 0 PID: 7540 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 907.900195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 907.900207] Call Trace: [ 907.900215] [ 907.900223] dump_stack_lvl+0xfa/0x120 [ 907.900260] should_fail_ex+0x4d7/0x5e0 [ 907.900298] ? ext4_mb_new_blocks+0x64e/0x45b0 [ 907.900325] should_failslab+0xc2/0x120 [ 907.900356] kmem_cache_alloc_noprof+0x72/0x680 [ 907.900383] ? do_raw_spin_unlock+0x53/0x220 [ 907.900439] ? ext4_mb_new_blocks+0x64e/0x45b0 [ 907.900476] ext4_mb_new_blocks+0x64e/0x45b0 [ 907.900531] ? kasan_save_track+0x14/0x30 [ 907.900574] ? __kasan_kmalloc+0x7f/0x90 [ 907.900604] ? trace_kmalloc+0x1f/0xb0 [ 907.900631] ? __kmalloc_noprof+0x2c9/0x760 [ 907.900667] ? ext4_find_extent+0x7f5/0xa00 [ 907.900700] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 907.900730] ? ext4_ext_search_right+0x2e8/0xbd0 [ 907.900762] ? ext4_inode_to_goal_block+0x323/0x430 [ 907.900796] ext4_ext_map_blocks+0x1c4b/0x5f70 [ 907.900828] ? lock_acquire+0x15e/0x2f0 [ 907.900852] ? fs_reclaim_acquire+0xae/0x150 [ 907.900881] ? lock_is_held_type+0x9e/0x120 [ 907.900911] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 907.900938] ? crc32c+0x1ae/0x350 [ 907.900971] ? lock_acquire+0x15e/0x2f0 [ 907.900994] ? ext4_map_blocks+0x55b/0x14a0 [ 907.901034] ? __pfx_down_write+0x10/0x10 [ 907.901060] ? ext4_es_lookup_extent+0xc8/0xb30 [ 907.901102] ext4_map_blocks+0x624/0x14a0 [ 907.901133] ? __up_read+0x197/0x750 [ 907.901160] ? __pfx_ext4_map_blocks+0x10/0x10 [ 907.901186] ? __pfx___up_read+0x10/0x10 [ 907.901215] ? lock_release+0xc8/0x290 [ 907.901244] ? ext4_map_blocks+0x1e0/0x14a0 [ 907.901277] ext4_getblk+0x682/0x8e0 [ 907.901304] ? __pfx_ext4_getblk+0x10/0x10 [ 907.901328] ? __pfx_security_inode_init_security+0x10/0x10 [ 907.901363] ? crc32c+0x1ae/0x350 [ 907.901397] ext4_bread+0x2e/0x1a0 [ 907.901424] ext4_append+0x224/0x530 [ 907.901456] ? __pfx_ext4_append+0x10/0x10 [ 907.901487] ? __pfx___ext4_new_inode+0x10/0x10 [ 907.901524] ext4_init_new_dir+0x13c/0x240 [ 907.901545] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 907.901575] ext4_mkdir+0x3c5/0xb30 [ 907.901601] ? __pfx_ext4_mkdir+0x10/0x10 [ 907.901620] ? security_inode_permission+0x72/0xe0 [ 907.901649] vfs_mkdir+0x59a/0x8d0 [ 907.901676] do_mkdirat+0x19f/0x3d0 [ 907.901708] ? __pfx_do_mkdirat+0x10/0x10 [ 907.901746] __x64_sys_mkdir+0xf3/0x140 [ 907.901775] do_syscall_64+0xbf/0x390 [ 907.901804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.901826] RIP: 0033:0x7fb507509c27 [ 907.901843] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 907.901863] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 907.901884] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb507509c27 [ 907.901898] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 907.901911] RBP: 00007fb504a80040 R08: 0000000000000000 R09: ffffffffffffffff [ 907.901924] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 907.901937] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 907.901967] 03:56:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 908.012030] No source specified [ 908.015808] No source specified 03:56:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 73) 03:56:57 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:57 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:57 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:57 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:56:57 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 917.303648] No source specified [ 917.306863] loop4: detected capacity change from 0 to 4 [ 917.327063] No source specified [ 917.330352] EXT4-fs: Mount option(s) incompatible with ext2 [ 917.330988] 9pnet_fd: Insufficient options for proto=fd [ 917.401552] 9pnet_fd: Insufficient options for proto=fd 03:56:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x3000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:56:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 74) 03:56:57 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 917.587696] No source specified [ 917.604373] loop4: detected capacity change from 0 to 4 [ 917.607625] FAULT_INJECTION: forcing a failure. [ 917.607625] name failslab, interval 1, probability 0, space 0, times 0 [ 917.608756] CPU: 0 UID: 0 PID: 7594 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 917.608773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 917.608780] Call Trace: [ 917.608784] [ 917.608789] dump_stack_lvl+0xfa/0x120 [ 917.608812] should_fail_ex+0x4d7/0x5e0 [ 917.608835] ? ext4_mb_new_blocks+0x2414/0x45b0 [ 917.608852] should_failslab+0xc2/0x120 [ 917.608871] kmem_cache_alloc_noprof+0x72/0x680 [ 917.608889] ? ext4_mb_new_blocks+0x2414/0x45b0 [ 917.608904] ext4_mb_new_blocks+0x2414/0x45b0 [ 917.608924] ? kasan_save_track+0x14/0x30 [ 917.608942] ? __kasan_kmalloc+0x7f/0x90 [ 917.608959] ? trace_kmalloc+0x1f/0xb0 [ 917.608975] ? __kmalloc_noprof+0x2c9/0x760 [ 917.608994] ? __pfx_css_rstat_updated+0x10/0x10 [ 917.609013] ? ext4_find_extent+0x7f5/0xa00 [ 917.609033] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 917.609050] ? ext4_ext_search_right+0x2e8/0xbd0 [ 917.609068] ? ext4_inode_to_goal_block+0x323/0x430 [ 917.609092] ext4_ext_map_blocks+0x1c4b/0x5f70 [ 917.609111] ? mark_held_locks+0x49/0x80 [ 917.609128] ? trace_sched_exit_tp+0xbf/0x100 [ 917.609149] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 917.609165] ? look_up_lock_class+0x56/0x150 [ 917.609182] ? lock_acquire+0x15e/0x2f0 [ 917.609195] ? ext4_map_blocks+0x55b/0x14a0 [ 917.609217] ? __pfx_down_write+0x10/0x10 [ 917.609233] ? ext4_es_lookup_extent+0xc8/0xb30 [ 917.609251] ext4_map_blocks+0x624/0x14a0 [ 917.609268] ? __up_read+0x197/0x750 [ 917.609284] ? __pfx_ext4_map_blocks+0x10/0x10 [ 917.609299] ? __pfx___up_read+0x10/0x10 [ 917.609316] ? lock_release+0xc8/0x290 [ 917.609333] ? ext4_map_blocks+0x1e0/0x14a0 [ 917.609351] ext4_getblk+0x682/0x8e0 [ 917.609367] ? __pfx_ext4_getblk+0x10/0x10 [ 917.609381] ? __pfx_security_inode_init_security+0x10/0x10 [ 917.609405] ? crc32c+0x1ae/0x350 [ 917.609426] ext4_bread+0x2e/0x1a0 [ 917.609442] ext4_append+0x224/0x530 [ 917.609460] ? __pfx_ext4_append+0x10/0x10 [ 917.609478] ? __pfx___ext4_new_inode+0x10/0x10 [ 917.609500] ext4_init_new_dir+0x13c/0x240 [ 917.609511] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 917.609528] ext4_mkdir+0x3c5/0xb30 [ 917.609543] ? __pfx_ext4_mkdir+0x10/0x10 [ 917.609555] ? security_inode_permission+0x72/0xe0 [ 917.609571] vfs_mkdir+0x59a/0x8d0 [ 917.609588] do_mkdirat+0x19f/0x3d0 [ 917.609604] ? __pfx_do_mkdirat+0x10/0x10 [ 917.609625] __x64_sys_mkdir+0xf3/0x140 [ 917.609641] do_syscall_64+0xbf/0x390 [ 917.609659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.609672] RIP: 0033:0x7fb507509c27 [ 917.609682] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 917.609694] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 917.609706] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb507509c27 [ 917.609715] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000140 [ 917.609722] RBP: 00007fb504a80040 R08: 0000000000000000 R09: ffffffffffffffff [ 917.609730] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 917.609737] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 917.609753] [ 917.636927] No source specified 03:56:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 917.875189] No source specified [ 917.882041] No source specified 03:57:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:57:08 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 75) 03:57:08 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:08 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:08 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 927.842408] loop4: detected capacity change from 0 to 4 [ 927.849862] EXT4-fs: Mount option(s) incompatible with ext2 [ 927.883053] No source specified [ 927.888910] No source specified [ 927.895690] 9pnet_fd: Insufficient options for proto=fd 03:57:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 76) [ 927.973730] loop4: detected capacity change from 0 to 4 03:57:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x6000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:57:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 77) 03:57:08 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 928.144107] loop4: detected capacity change from 0 to 4 [ 928.148610] No source specified [ 928.151284] EXT4-fs: Mount option(s) incompatible with ext2 [ 928.162466] No source specified 03:57:08 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:08 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) 03:57:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 78) 03:57:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x7000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 928.292903] loop4: detected capacity change from 0 to 4 [ 928.298673] EXT4-fs: Mount option(s) incompatible with ext2 03:57:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 79) [ 928.362062] loop4: detected capacity change from 0 to 4 [ 928.408952] No source specified [ 928.415951] No source specified 03:57:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 80) 03:57:08 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 928.541659] loop4: detected capacity change from 0 to 4 [ 928.554131] EXT4-fs: Mount option(s) incompatible with ext2 03:57:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x10000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 928.732004] No source specified [ 928.740992] No source specified 03:57:09 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r1, r2, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:09 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 81) 03:57:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x20000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:57:09 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:09 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:09 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295", 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x1f, @any, 0x9, 0x1}, 0xe) sendfile(r1, r2, 0x0, 0xfdef) write(r0, &(0x7f0000000900)="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", 0x185) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r3, 0x0, 0xfdef) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 929.074957] No source specified [ 929.079771] No source specified [ 929.111522] loop4: detected capacity change from 0 to 4 03:57:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x20100000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 929.129657] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 929.130886] EXT4-fs: Mount option(s) incompatible with ext2 03:57:09 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 929.230457] No source specified [ 929.238492] No source specified [ 933.153374] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 933.158750] Bluetooth: hci3: Injecting HCI hardware error event [ 933.163275] Bluetooth: hci3: hardware error 0x00 [ 935.201241] Bluetooth: hci3: Opcode 0x0c03 failed: -110 03:57:21 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:57:21 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{}, {0x81, 0xe440, 0x9, 0x5, 0x6}}}}, 0xd) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295", 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x1f, @any, 0x9, 0x1}, 0xe) sendfile(r1, r2, 0x0, 0xfdef) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161", 0x185) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) sendfile(r0, r3, 0x0, 0xfdef) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:57:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 82) 03:57:21 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:21 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:21 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:21 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 940.832865] No source specified [ 940.849699] No source specified [ 940.868811] loop4: detected capacity change from 0 to 4 [ 940.888684] FAULT_INJECTION: forcing a failure. [ 940.888684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.890651] CPU: 1 UID: 0 PID: 7711 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 940.890681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 940.890694] Call Trace: [ 940.890702] [ 940.890710] dump_stack_lvl+0xfa/0x120 [ 940.890745] should_fail_ex+0x4d7/0x5e0 [ 940.890785] _copy_from_user+0x30/0xd0 [ 940.890808] memdup_user+0x7e/0xe0 [ 940.890833] strndup_user+0x78/0xe0 [ 940.890857] __x64_sys_mount+0x136/0x310 [ 940.890888] ? __pfx___x64_sys_mount+0x10/0x10 [ 940.890927] do_syscall_64+0xbf/0x390 [ 940.890958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.890981] RIP: 0033:0x7fb50750c04a [ 940.890999] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 940.891020] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 940.891042] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750c04a [ 940.891057] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fb504a80000 [ 940.891071] RBP: 00007fb504a80040 R08: 00007fb504a80040 R09: 0000000020000000 [ 940.891093] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 940.891107] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 940.891140] 03:57:21 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xc0ed0000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:57:21 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 83) [ 941.198013] No source specified [ 941.207730] No source specified [ 941.312915] loop4: detected capacity change from 0 to 4 03:57:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xef080000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:57:21 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 84) [ 941.574535] No source specified [ 941.615316] No source specified [ 941.633498] 9pnet_fd: Insufficient options for proto=fd [ 941.723867] loop4: detected capacity change from 0 to 4 03:57:21 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 941.768745] EXT4-fs: Mount option(s) incompatible with ext2 [ 941.974469] 9pnet_fd: Insufficient options for proto=fd 03:57:31 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:57:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 85) 03:57:31 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) write(r1, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:31 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 03:57:31 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:31 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:31 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 951.250517] No source specified [ 951.251976] No source specified 03:57:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xf9fdffff, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 951.271587] loop4: detected capacity change from 0 to 4 [ 951.279030] FAULT_INJECTION: forcing a failure. [ 951.279030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.281340] CPU: 0 UID: 0 PID: 7750 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 951.281357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 951.281364] Call Trace: [ 951.281368] [ 951.281373] dump_stack_lvl+0xfa/0x120 [ 951.281395] should_fail_ex+0x4d7/0x5e0 [ 951.281416] _copy_from_user+0x30/0xd0 [ 951.281429] memdup_user+0x7e/0xe0 [ 951.281442] strndup_user+0x78/0xe0 [ 951.281455] __x64_sys_mount+0x17f/0x310 [ 951.281471] ? __pfx___x64_sys_mount+0x10/0x10 [ 951.281491] do_syscall_64+0xbf/0x390 [ 951.281507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.281520] RIP: 0033:0x7fb50750c04a [ 951.281529] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 951.281540] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 951.281551] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750c04a [ 951.281559] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fb504a80000 [ 951.281566] RBP: 00007fb504a80040 R08: 00007fb504a80040 R09: 0000000020000000 [ 951.281573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 951.281580] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 951.281595] [ 951.339399] 9pnet_fd: Insufficient options for proto=fd [ 951.387787] No source specified 03:57:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 86) [ 951.394883] No source specified 03:57:31 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:31 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:31 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) (fail_nth: 1) 03:57:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xffffe000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 951.528521] loop4: detected capacity change from 0 to 4 [ 951.540966] FAULT_INJECTION: forcing a failure. [ 951.540966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.542015] CPU: 0 UID: 0 PID: 7776 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 951.542032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 951.542039] Call Trace: [ 951.542043] [ 951.542047] dump_stack_lvl+0xfa/0x120 [ 951.542068] should_fail_ex+0x4d7/0x5e0 [ 951.542094] _copy_from_user+0x30/0xd0 [ 951.542106] copy_mount_options+0x76/0x180 [ 951.542126] __x64_sys_mount+0x1ab/0x310 [ 951.542141] ? __pfx___x64_sys_mount+0x10/0x10 [ 951.542161] do_syscall_64+0xbf/0x390 [ 951.542177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.542190] RIP: 0033:0x7fb50750c04a [ 951.542199] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 951.542210] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 951.542222] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750c04a [ 951.542230] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fb504a80000 [ 951.542237] RBP: 00007fb504a80040 R08: 00007fb504a80040 R09: 0000000020000000 [ 951.542244] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 951.542251] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 951.542266] [ 951.582931] EXT4-fs: Mount option(s) incompatible with ext2 [ 951.675593] No source specified [ 951.680968] FAULT_INJECTION: forcing a failure. [ 951.680968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.683049] CPU: 1 UID: 0 PID: 7785 Comm: syz-executor.2 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 951.683086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 951.683099] Call Trace: [ 951.683107] [ 951.683116] dump_stack_lvl+0xfa/0x120 [ 951.683154] should_fail_ex+0x4d7/0x5e0 [ 951.683194] _copy_from_iter+0x1dc/0x1660 [ 951.683218] ? __mutex_lock+0x166/0x1020 [ 951.683245] ? anon_pipe_write+0x128/0x1b30 [ 951.683277] ? __pfx__copy_from_iter+0x10/0x10 [ 951.683299] ? __pfx___mutex_lock+0x10/0x10 [ 951.683330] ? __lock_acquire+0x694/0x1b70 [ 951.683363] copy_page_from_iter+0xe3/0x180 [ 951.683388] anon_pipe_write+0x991/0x1b30 [ 951.683423] ? lock_downgrade+0x220/0x240 [ 951.683452] ? __pfx_anon_pipe_write+0x10/0x10 [ 951.683481] ? selinux_file_permission+0x99/0x600 [ 951.683521] ? security_file_permission+0x22/0x90 [ 951.683552] vfs_write+0xbe9/0x1150 [ 951.683581] ? __pfx_anon_pipe_write+0x10/0x10 [ 951.683610] ? __fget_files+0x34/0x3b0 [ 951.683637] ? __pfx_vfs_write+0x10/0x10 [ 951.683685] ksys_write+0x1ef/0x240 [ 951.683713] ? __pfx_ksys_write+0x10/0x10 [ 951.683750] do_syscall_64+0xbf/0x390 [ 951.683781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.683805] RIP: 0033:0x7f8f23d17b19 [ 951.683822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 951.683844] RSP: 002b:00007f8f2126c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 951.683866] RAX: ffffffffffffffda RBX: 00007f8f23e2b020 RCX: 00007f8f23d17b19 [ 951.683881] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000005 03:57:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 87) 03:57:31 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 951.683895] RBP: 00007f8f2126c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 951.683908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.683922] R13: 00007ffea8bc751f R14: 00007f8f2126c300 R15: 0000000000022000 [ 951.683951] [ 951.725446] No source specified [ 951.759996] loop4: detected capacity change from 0 to 4 [ 951.785294] FAULT_INJECTION: forcing a failure. [ 951.785294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.786421] CPU: 0 UID: 0 PID: 7787 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 951.786439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 951.786446] Call Trace: [ 951.786452] [ 951.786456] dump_stack_lvl+0xfa/0x120 [ 951.786480] should_fail_ex+0x4d7/0x5e0 [ 951.786505] strncpy_from_user+0x3b/0x2f0 [ 951.786524] getname_flags.part.0+0x8d/0x540 [ 951.786545] getname_flags+0x95/0xe0 [ 951.786565] user_path_at+0x27/0x90 [ 951.786580] __x64_sys_mount+0x1fb/0x310 [ 951.786601] ? __pfx___x64_sys_mount+0x10/0x10 [ 951.786624] do_syscall_64+0xbf/0x390 [ 951.786656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.786672] RIP: 0033:0x7fb50750c04a [ 951.786683] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 951.786696] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 951.786709] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750c04a [ 951.786718] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fb504a80000 [ 951.786726] RBP: 00007fb504a80040 R08: 00007fb504a80040 R09: 0000000020000000 [ 951.786736] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 951.786743] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 951.786760] 03:57:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xfffffdf9, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:57:41 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) (fail_nth: 1) 03:57:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 1) 03:57:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 88) 03:57:41 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) (fail_nth: 2) 03:57:41 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)=""/2, 0x2) write(r1, &(0x7f0000000900)='^', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write(r4, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:41 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:41 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 961.780745] loop4: detected capacity change from 0 to 4 [ 961.788448] FAULT_INJECTION: forcing a failure. [ 961.788448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.790003] CPU: 0 UID: 0 PID: 7806 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 961.790030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 961.790041] Call Trace: [ 961.790049] [ 961.790056] dump_stack_lvl+0xfa/0x120 [ 961.790094] should_fail_ex+0x4d7/0x5e0 [ 961.790129] _copy_from_user+0x30/0xd0 [ 961.790150] copy_mount_options+0x76/0x180 [ 961.790183] __x64_sys_mount+0x1ab/0x310 [ 961.790209] ? __pfx___x64_sys_mount+0x10/0x10 [ 961.790243] do_syscall_64+0xbf/0x390 [ 961.790271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.790291] RIP: 0033:0x7fb50750c04a [ 961.790306] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 961.790325] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 961.790344] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750c04a [ 961.790357] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fb504a80000 [ 961.790369] RBP: 00007fb504a80040 R08: 00007fb504a80040 R09: 0000000020000000 [ 961.790382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 961.790393] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 961.790418] [ 961.811524] No source specified [ 961.817000] No source specified 03:57:42 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 961.847535] EXT4-fs: Mount option(s) incompatible with ext2 [ 961.851779] FAULT_INJECTION: forcing a failure. [ 961.851779] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 961.853268] CPU: 0 UID: 0 PID: 7815 Comm: syz-executor.7 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 961.853293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 961.853304] Call Trace: [ 961.853311] [ 961.853318] dump_stack_lvl+0xfa/0x120 [ 961.853347] should_fail_ex+0x4d7/0x5e0 [ 961.853382] should_fail_alloc_page+0xe0/0x110 [ 961.853411] prepare_alloc_pages+0x1af/0x500 [ 961.853441] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 961.853473] ? kernel_text_address+0x5b/0xc0 [ 961.853496] ? unwind_get_return_address+0x59/0xa0 [ 961.853528] ? unwind_get_return_address+0x59/0xa0 [ 961.853556] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 961.853582] ? arch_stack_walk+0x9c/0xf0 [ 961.853606] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 961.853648] ? _kstrtoull+0x13e/0x200 [ 961.853670] ? __pfx__kstrtoull+0x10/0x10 [ 961.853692] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 961.853719] ? policy_nodemask+0xeb/0x4e0 [ 961.853741] alloc_pages_mpol+0xed/0x340 [ 961.853760] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 961.853777] ? __lock_acquire+0x694/0x1b70 [ 961.853807] alloc_pages_noprof+0xa1/0x380 [ 961.853828] get_free_pages_noprof+0x10/0xb0 [ 961.853850] vcs_read+0xb6/0xbd0 [ 961.853876] ? find_held_lock+0x2b/0x80 [ 961.853905] ? get_pid_task+0xfd/0x250 [ 961.853923] ? lock_release+0xc8/0x290 [ 961.853948] ? avc_policy_seqno+0x9/0x20 [ 961.853969] ? selinux_file_permission+0x99/0x600 [ 961.853998] ? __pfx_vcs_read+0x10/0x10 [ 961.854024] ? security_file_permission+0x22/0x90 [ 961.854047] ? __pfx_vcs_read+0x10/0x10 [ 961.854073] vfs_read+0x1eb/0xc70 [ 961.854105] ? lock_acquire+0x15e/0x2f0 [ 961.854126] ? __fget_files+0x34/0x3b0 [ 961.854148] ? __pfx_vfs_read+0x10/0x10 [ 961.854170] ? __fget_files+0x203/0x3b0 [ 961.854191] ? lock_release+0xc8/0x290 [ 961.854216] ? __fget_files+0x20d/0x3b0 [ 961.854245] ksys_read+0x121/0x240 [ 961.854267] ? __pfx_ksys_read+0x10/0x10 [ 961.854298] do_syscall_64+0xbf/0x390 [ 961.854324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.854343] RIP: 0033:0x7f26338b8b19 [ 961.854357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 961.854375] RSP: 002b:00007f2630e0d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 961.854394] RAX: ffffffffffffffda RBX: 00007f26339cc020 RCX: 00007f26338b8b19 [ 961.854407] RDX: 0000000000000022 RSI: 0000000020000240 RDI: 0000000000000004 [ 961.854418] RBP: 00007f2630e0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 961.854430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.854441] R13: 00007fff9e22f05f R14: 00007f2630e0d300 R15: 0000000000022000 [ 961.854465] [ 961.892770] FAULT_INJECTION: forcing a failure. [ 961.892770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.894534] CPU: 1 UID: 0 PID: 7818 Comm: syz-executor.2 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 961.894564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 961.894577] Call Trace: [ 961.894585] [ 961.894594] dump_stack_lvl+0xfa/0x120 [ 961.894631] should_fail_ex+0x4d7/0x5e0 [ 961.894672] _copy_to_user+0x32/0xd0 [ 961.894696] simple_read_from_buffer+0xe0/0x180 [ 961.894724] proc_fail_nth_read+0x18a/0x240 [ 961.894757] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 961.894804] ? security_file_permission+0x22/0x90 [ 961.894832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 961.894863] vfs_read+0x1eb/0xc70 [ 961.894897] ? __pfx_vfs_read+0x10/0x10 [ 961.894926] ? lock_release+0xc8/0x290 [ 961.894958] ? __fget_files+0x20d/0x3b0 [ 961.894995] ksys_read+0x121/0x240 [ 961.895022] ? __pfx_ksys_read+0x10/0x10 [ 961.895059] do_syscall_64+0xbf/0x390 [ 961.895098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.895122] RIP: 0033:0x7f8f23cca69c [ 961.895139] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 961.895161] RSP: 002b:00007f8f2126c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 961.895183] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f8f23cca69c [ 961.895198] RDX: 000000000000000f RSI: 00007f8f2126c1e0 RDI: 0000000000000006 [ 961.895212] RBP: 00007f8f2126c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 961.895225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.895238] R13: 00007ffea8bc751f R14: 00007f8f2126c300 R15: 0000000000022000 [ 961.895268] 03:57:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:57:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) setuid(0x0) dup2(r1, r0) 03:57:51 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(0x0, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:57:51 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) (fail_nth: 2) 03:57:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 89) 03:57:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 2) 03:57:51 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) 03:57:51 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 970.841053] FAULT_INJECTION: forcing a failure. [ 970.841053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.842055] CPU: 1 UID: 0 PID: 7837 Comm: syz-executor.7 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 970.842071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 970.842082] Call Trace: [ 970.842086] [ 970.842091] dump_stack_lvl+0xfa/0x120 [ 970.842114] should_fail_ex+0x4d7/0x5e0 [ 970.842137] _copy_to_user+0x32/0xd0 [ 970.842151] simple_read_from_buffer+0xe0/0x180 [ 970.842167] proc_fail_nth_read+0x18a/0x240 [ 970.842185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.842202] ? security_file_permission+0x22/0x90 [ 970.842218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.842234] vfs_read+0x1eb/0xc70 [ 970.842253] ? __pfx_vfs_read+0x10/0x10 [ 970.842268] ? lock_release+0xc8/0x290 [ 970.842287] ? __fget_files+0x20d/0x3b0 [ 970.842307] ksys_read+0x121/0x240 [ 970.842321] ? __pfx_ksys_read+0x10/0x10 [ 970.842341] do_syscall_64+0xbf/0x390 [ 970.842358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.842372] RIP: 0033:0x7f263386b69c [ 970.842381] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 970.842393] RSP: 002b:00007f2630e2e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 970.842405] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f263386b69c [ 970.842413] RDX: 000000000000000f RSI: 00007f2630e2e1e0 RDI: 0000000000000005 [ 970.842421] RBP: 00007f2630e2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 970.842428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.842435] R13: 00007fff9e22f05f R14: 00007f2630e2e300 R15: 0000000000022000 [ 970.842451] [ 970.863573] loop4: detected capacity change from 0 to 4 [ 970.874111] EXT4-fs: Mount option(s) incompatible with ext2 [ 970.878413] No source specified [ 970.892400] No source specified 03:58:00 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 90) 03:58:00 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x10) 03:58:00 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(0x0, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:58:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:58:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 3) 03:58:00 executing program 6: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/4096) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x88581dd1afc4ffd, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x44d}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 980.229795] loop4: detected capacity change from 0 to 4 [ 980.234575] FAULT_INJECTION: forcing a failure. [ 980.234575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.235491] CPU: 0 UID: 0 PID: 7864 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 980.235507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 980.235515] Call Trace: [ 980.235520] [ 980.235525] dump_stack_lvl+0xfa/0x120 [ 980.235549] should_fail_ex+0x4d7/0x5e0 [ 980.235570] _copy_from_user+0x30/0xd0 [ 980.235584] memdup_user+0x7e/0xe0 [ 980.235598] strndup_user+0x78/0xe0 [ 980.235610] __x64_sys_mount+0x136/0x310 [ 980.235627] ? __pfx___x64_sys_mount+0x10/0x10 [ 980.235647] do_syscall_64+0xbf/0x390 [ 980.235663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.235676] RIP: 0033:0x7f71d000eb19 [ 980.235685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 980.235696] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 980.235707] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 980.235715] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 980.235723] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 980.235730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.235737] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 980.235753] [ 980.242674] No source specified [ 980.252300] EXT4-fs: Mount option(s) incompatible with ext2 03:58:00 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(0x0, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 980.294463] No source specified 03:58:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 91) 03:58:00 executing program 6: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfed0, &(0x7f0000000000)=[{&(0x7f0000003b00)=""/4097, 0x1000}], 0x1}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) creat(&(0x7f0000001000)='./file0\x00', 0x2) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001040)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) 03:58:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 4) 03:58:00 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 980.402050] loop4: detected capacity change from 0 to 4 [ 980.413333] FAULT_INJECTION: forcing a failure. [ 980.413333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.414356] CPU: 0 UID: 0 PID: 7877 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 980.414372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 980.414382] Call Trace: [ 980.414386] [ 980.414391] dump_stack_lvl+0xfa/0x120 [ 980.414416] should_fail_ex+0x4d7/0x5e0 [ 980.414438] strncpy_from_user+0x3b/0x2f0 [ 980.414455] getname_flags.part.0+0x8d/0x540 [ 980.414469] getname_flags+0x95/0xe0 [ 980.414483] user_path_at+0x27/0x90 [ 980.414497] __x64_sys_mount+0x1fb/0x310 [ 980.414513] ? __pfx___x64_sys_mount+0x10/0x10 [ 980.414533] do_syscall_64+0xbf/0x390 [ 980.414550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.414563] RIP: 0033:0x7fb50750c04a [ 980.414572] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 980.414584] RSP: 002b:00007fb504a7ffa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 980.414595] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fb50750c04a [ 980.414603] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fb504a80000 [ 980.414611] RBP: 00007fb504a80040 R08: 00007fb504a80040 R09: 0000000020000000 [ 980.414618] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 980.414626] R13: 0000000020000140 R14: 00007fb504a80000 R15: 0000000020000180 [ 980.414641] 03:58:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xedc000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:58:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2000) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x181000) r1 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 980.472298] FAULT_INJECTION: forcing a failure. [ 980.472298] name failslab, interval 1, probability 0, space 0, times 0 [ 980.473182] CPU: 0 UID: 0 PID: 7880 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 980.473197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 980.473204] Call Trace: [ 980.473209] [ 980.473213] dump_stack_lvl+0xfa/0x120 [ 980.473235] should_fail_ex+0x4d7/0x5e0 [ 980.473260] should_failslab+0xc2/0x120 [ 980.473278] __kmalloc_cache_noprof+0x73/0x6a0 [ 980.473290] ? __might_fault+0xe0/0x190 [ 980.473306] ? copy_mount_options+0x55/0x180 [ 980.473326] ? copy_mount_options+0x55/0x180 [ 980.473341] ? memdup_user+0x95/0xe0 [ 980.473354] copy_mount_options+0x55/0x180 [ 980.473372] __x64_sys_mount+0x1ab/0x310 [ 980.473388] ? __pfx___x64_sys_mount+0x10/0x10 [ 980.473408] do_syscall_64+0xbf/0x390 [ 980.473423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.473436] RIP: 0033:0x7f71d000eb19 [ 980.473445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 980.473457] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 980.473468] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 980.473477] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 980.473484] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 980.473491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.473498] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 980.473513] 03:58:00 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:00 executing program 6: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfed0, &(0x7f0000000000)=[{&(0x7f0000003b00)=""/4097, 0x1000}], 0x1}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) creat(&(0x7f0000001000)='./file0\x00', 0x2) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001040)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) 03:58:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) (fail_nth: 92) 03:58:00 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0xfdef) 03:58:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 5) [ 980.564537] No source specified 03:58:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 980.600170] No source specified 03:58:00 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:00 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) close(r2) 03:58:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x8000000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:58:00 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000005e00)={0x0, 0x80, 0x0, 0xff, 0x40, 0xe2, 0x0, 0x0, 0x8004, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000500), 0xd}, 0x138, 0x0, 0x8, 0x1, 0xfffffffffffffff7, 0x8000, 0x555c, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0x0, r0, 0x8) writev(r1, &(0x7f00000060c0)=[{&(0x7f0000005e80)="fe556668bcb96b0761ec52eeee7ac840b6350cff7e558f768634f01b96eeed487f767e618088b9f6cb2571d8f6e024d4517e6d931ec66c073990cc4dd349f67ebc4351448b816d923efafe780a0aaabb994f9f891c662673a8b22896e46c54c0d7da7c474d4d839594f8", 0x6a}, {&(0x7f0000000740)}, {&(0x7f0000005f00)="9a856bff5b547bde37cc5e240da8047f830a1a28bbaa46bb4bd3c4bee3222d0ca30413add517c3f1cfe627", 0x2b}, {&(0x7f0000005f40)="c9d3243f578d8f4f24e2bafec225d7ace0774382b3e7e8733786dc8766f9fea5a6b0c6edbc402ef750d30fe795b0f53161e32fc1fbf72fea24bffe9add285e53351f5eaa55997303a4c8f59eb0d028675484eb4844dc33ecae669a17d97dc6bb062ce8436226b7", 0x67}, {&(0x7f0000005fc0)="e10ceee25a278d111ccaa5c7954319efdc720be62e19b0a3e84e92a7e62303a61790a84ee38620171bb15a8557b674e6a16429f613232015561ec794d98ce8de3886a0227c6984a773eead20d3236d8779c1ce4c468fdca46a3deb966ae3315b657cdac65ddfb0be0608eaa51afa90e318b1738d8c7681a0d20f0a567aecf55346778d7e6f3957797d969c41826df05eae4815146e6e1b66a67f4aa311bc2b3bdc63abd63de3d55bf2317acf6348a17f328eb40fc3e1bf6274a3d5591c9c42fa88961e80f715b428e61c7cbb503d0cc582f0d61ee720055be0521d28ecb9b8c826d81cf0fd", 0xe5}], 0x5) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r2, &(0x7f0000000240)=""/34, 0x22) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005c40)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000001c0)=""/11, 0xb}], 0x2}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000440)=""/111, 0x6f}, {&(0x7f00000004c0)=""/1, 0x1}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/241, 0xf1}], 0x5}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/90, 0x5a}, {&(0x7f0000001800)=""/248, 0xf8}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/250, 0xfa}, {&(0x7f0000002a00)=""/22, 0x16}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/139, 0x8b}, {&(0x7f0000003b00)=""/61, 0x3d}], 0xa, &(0x7f0000003c00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000003c40)=@abs, 0x6e, &(0x7f0000004200)=[{&(0x7f0000003cc0)=""/220, 0xdc}, {&(0x7f0000003dc0)=""/203, 0xcb}, {&(0x7f0000003ec0)=""/229, 0xe5}, {&(0x7f0000003fc0)=""/134, 0x86}, {&(0x7f0000004080)=""/160, 0xa0}, {&(0x7f0000004140)=""/70, 0x46}, {&(0x7f00000041c0)=""/9, 0x9}], 0x7, &(0x7f0000004280)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000005500)=[{&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/225, 0xe1}, {&(0x7f00000054c0)=""/21, 0x15}], 0x3, &(0x7f0000005540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000005680)=@abs, 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005700)=""/118, 0x76}, {&(0x7f0000005780)=""/166, 0xa6}, {&(0x7f0000005840)=""/177, 0xb1}, {&(0x7f0000005900)=""/186, 0xba}, {&(0x7f00000059c0)=""/168, 0xa8}], 0x5, &(0x7f0000005b00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x138}}], 0x6, 0x40, &(0x7f0000005dc0)={0x77359400}) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x20, 0x80, 0x6, 0x40, 0x0, 0x0, 0x84492, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x4, @perf_config_ext={0x3000000000000, 0x6}, 0x1000, 0x6, 0xfffffffd, 0x8, 0x7fffffff, 0xfffffffa, 0x9, 0x0, 0x0, 0x0, 0x2}, r3, 0x3, r0, 0x1) [ 980.848134] No source specified [ 980.849638] No source specified 03:58:10 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:10 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000000000}) ioctl$FS_IOC_SETFLAGS(r1, 0x6612, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 03:58:10 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:58:10 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0xfffffdef) 03:58:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 6) 03:58:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xe0ffff00000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:58:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = accept4$packet(r0, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='veth1_vlan\x00'}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000340)={0x0, "6ecfd34cb1f9d17197f265c62f45d2f0"}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001340)={0x2, 0x5, {0x0, @struct={0x1a1, 0x80000001}, r5, 0xfff, 0x0, 0xfffffffffffffffb, 0x9, 0x1000, 0x40, @usage=0x100, 0x3, 0xb039, [0x400, 0x6, 0xfa, 0x4f, 0x100000, 0x4d2f]}, {0xa4, @usage=0x18, 0x0, 0xffffffff, 0x8, 0x9, 0x5, 0x7, 0x20, @usage=0x1, 0x9, 0xfff, [0x10001, 0x80000000, 0x3, 0x8cf9, 0x86, 0x3d1]}, {0x2702, @usage, 0x0, 0x81, 0x0, 0x5, 0x2, 0xff, 0x404, @usage=0x100000001, 0xffff, 0x1, [0x0, 0xa1d, 0x4, 0x0, 0xfda, 0x4]}, {0x7, 0x1000, 0x401}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write$P9_RSETATTR(r2, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 990.530731] loop4: detected capacity change from 0 to 4 [ 990.536554] EXT4-fs: Mount option(s) incompatible with ext2 [ 990.549663] loop4: detected capacity change from 0 to 4 [ 990.554830] EXT4-fs: Mount option(s) incompatible with ext2 [ 990.612434] No source specified 03:58:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 990.617988] No source specified [ 990.618782] FAULT_INJECTION: forcing a failure. [ 990.618782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.619838] CPU: 0 UID: 0 PID: 7937 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 990.619855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.619863] Call Trace: [ 990.619867] [ 990.619872] dump_stack_lvl+0xfa/0x120 [ 990.619894] should_fail_ex+0x4d7/0x5e0 [ 990.619915] _copy_from_user+0x30/0xd0 [ 990.619928] copy_mount_options+0x76/0x180 [ 990.619948] __x64_sys_mount+0x1ab/0x310 [ 990.619964] ? __pfx___x64_sys_mount+0x10/0x10 [ 990.619984] do_syscall_64+0xbf/0x390 [ 990.620001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.620014] RIP: 0033:0x7f71d000eb19 [ 990.620023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.620035] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 990.620047] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 990.620054] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 990.620061] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 990.620069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.620080] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 990.620095] 03:58:10 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 990.712680] loop4: detected capacity change from 0 to 4 [ 990.721779] EXT4-fs: Mount option(s) incompatible with ext2 [ 990.771793] 9pnet_fd: Insufficient options for proto=fd 03:58:18 executing program 7: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x51100, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x200, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r2, &(0x7f0000000240)=""/34, 0x22) 03:58:18 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:58:18 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {0x1000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x6e6bba, 0x2}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@updpolicy={0x244, 0x19, 0x20, 0x70bd27, 0x25dfdbff, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4e24, 0x5, 0x4e22, 0xfa, 0x2, 0x20, 0xa0, 0x8, r2, 0xffffffffffffffff}, {0x10001, 0x40, 0x5, 0xffffffffffff6f43, 0x2218, 0x4, 0x7, 0x1000200000}, {0x3f, 0x80000001, 0x1, 0x1f}, 0x84, 0x6e6bc0, 0x1, 0x0, 0x0, 0x2}, [@algo_auth={0xe6, 0x1, {{'michael_mic\x00'}, 0x4f0, "15f9638f523e136c56bf6519000c8980e89b733810c42b32b82020d7d7d940ef0824abcac616d6594b51b4601078faa5087a2ac40a24da803ff0ad1af1b5c0601028156d81740439fbae53595b2683cf890c177ff06eb2230246c27866aa9344afe0280f01e0ab0d92a5ecc2ab5a923c0f42fafa71e3d4b15ed3a84dc58d20ca39c1b612059d4274d17e8df5740846673cc54f8408e7e77651ac233685c8"}}, @policy_type={0xa, 0x10, {0x1}}, @XFRMA_IF_ID={0x8}, @algo_crypt={0x8d, 0x2, {{'xts-twofish-avx\x00'}, 0x228, "4c938fa4f8e248598fb9f6dc01a1a548c027399a7cc603354aa73e2aecc7548b57fd7474b7e4935195072d80e13c2d6ec4a46d1b2454de103be143c7ecbccee627c9fbf50d"}}]}, 0x244}, 0x1, 0x0, 0x0, 0x1}, 0x20005) 03:58:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 7) 03:58:18 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:18 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:18 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0xfffffffffffffdef) 03:58:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 998.782032] FAULT_INJECTION: forcing a failure. [ 998.782032] name failslab, interval 1, probability 0, space 0, times 0 [ 998.783154] CPU: 0 UID: 0 PID: 7961 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 998.783171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 998.783178] Call Trace: [ 998.783183] [ 998.783187] dump_stack_lvl+0xfa/0x120 [ 998.783211] should_fail_ex+0x4d7/0x5e0 [ 998.783243] ? getname_flags.part.0+0x48/0x540 [ 998.783255] should_failslab+0xc2/0x120 [ 998.783273] kmem_cache_alloc_noprof+0x72/0x680 [ 998.783290] ? getname_flags.part.0+0x48/0x540 [ 998.783300] getname_flags.part.0+0x48/0x540 [ 998.783313] getname_flags+0x95/0xe0 [ 998.783327] user_path_at+0x27/0x90 [ 998.783342] __x64_sys_mount+0x1fb/0x310 [ 998.783358] ? __pfx___x64_sys_mount+0x10/0x10 [ 998.783378] do_syscall_64+0xbf/0x390 [ 998.783394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.783407] RIP: 0033:0x7f71d000eb19 [ 998.783417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 998.783429] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 998.783441] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 998.783449] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 998.783456] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 998.783464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.783471] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 998.783486] [ 998.849536] 9pnet_fd: Insufficient options for proto=fd [ 998.851837] No source specified [ 998.858879] No source specified 03:58:19 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 8) 03:58:19 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x42, 0x4) fcntl$setstatus(r0, 0x4, 0x42800) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}, 0x1c, 0x0}}], 0x1c, 0x20008800) 03:58:19 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:19 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:19 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x1, 0x2, 0x6, 0x0, 0xffffffffffffff7f, 0x20c, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, @perf_config_ext={0x80000001, 0x1f}, 0x2, 0xfffffffffffffffd, 0x1, 0x0, 0x6, 0x10001, 0x6, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) read(r1, &(0x7f0000000240)=""/34, 0x22) 03:58:19 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:58:19 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdyo=', @ANYRESHEX=r7, @ANYBLOB='.noextend,\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYBLOB="de2c7766646e2e69a8fbd6a63fc9986bf2652195f23eae91159ad989cbfedff0b6198214683b01e87a861dd3fbf7ade6ab3df3a8c24a649597faba1da5bef28bd4a2322a3db3545f63372fb7de94d86bad9517585e8874bc837c89e9a455db6ab6d5b0d8d108cea673c186b17e8f5b24", @ANYRESOCT=r2, @ANYRESDEC=r4]) write(r1, &(0x7f0000000240)="ec", 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x7fff, 0x1, 0x1fa00000, 0x3}) [ 999.040974] No source specified [ 999.046151] 9pnet_fd: Insufficient options for proto=fd [ 999.048582] No source specified 03:58:19 executing program 6: getresuid(0x0, 0x0, &(0x7f0000000000)) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001340)=""/55) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000025c0)) semget$private(0x0, 0x1, 0x58) syz_mount_image$iso9660(0x0, &(0x7f0000002640)='./file0\x00', 0x3, 0x1, &(0x7f00000027c0)=[{0x0, 0x0, 0x8}], 0xf001, 0x0) 03:58:19 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:19 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write(r2, &(0x7f0000000240)="ec", 0x1) r3 = openat$incfs(r1, &(0x7f0000000040)='.pending_reads\x00', 0x240002, 0x4) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x8000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}]}}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4fe, 0x5, 0x1, 0x8}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000d80)={0x0, 0x1, 0x8}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001180)={r6, "f4613ba9434865e2d2a461131bba597b"}) 03:58:19 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 9) 03:58:19 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:58:19 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 999.241795] 9pnet_fd: Insufficient options for proto=fd [ 999.249704] No source specified [ 999.255591] No source specified [ 999.270578] FAULT_INJECTION: forcing a failure. [ 999.270578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.272423] CPU: 1 UID: 0 PID: 8010 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 999.272454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 999.272468] Call Trace: [ 999.272476] [ 999.272485] dump_stack_lvl+0xfa/0x120 [ 999.272522] should_fail_ex+0x4d7/0x5e0 [ 999.272563] strncpy_from_user+0x3b/0x2f0 [ 999.272597] getname_flags.part.0+0x8d/0x540 [ 999.272623] getname_flags+0x95/0xe0 [ 999.272650] user_path_at+0x27/0x90 [ 999.272678] __x64_sys_mount+0x1fb/0x310 [ 999.272710] ? __pfx___x64_sys_mount+0x10/0x10 [ 999.272749] do_syscall_64+0xbf/0x390 [ 999.272781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.272806] RIP: 0033:0x7f71d000eb19 [ 999.272823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 999.272846] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 999.272868] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 999.272884] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 999.272898] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 999.272913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.272927] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 999.272957] [ 1001.582913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1001.585044] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1001.587868] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1001.594953] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1001.598597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1003.682201] Bluetooth: hci6: command tx timeout [ 1005.729150] Bluetooth: hci6: command tx timeout [ 1007.777225] Bluetooth: hci6: command tx timeout [ 1009.825318] Bluetooth: hci6: command tx timeout [ 1020.023941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.025066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.086257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.087573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.214349] loop4: detected capacity change from 0 to 4 [ 1020.228391] EXT4-fs: Mount option(s) incompatible with ext2 [ 1020.243207] loop4: detected capacity change from 0 to 4 [ 1020.250388] EXT4-fs: Mount option(s) incompatible with ext2 03:58:48 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:48 executing program 7: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/vcsu#\x00'}, {}, {0x20, '(-^['}, {0x20, '/dev/vcsu#\x00'}], 0xa, "a64532884c16b42a550549b5df3b"}, 0x37) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:58:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:58:48 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:58:48 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) dup(r1) 03:58:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 10) 03:58:48 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0xfde, 0xeb, 0x80, 0x8}, {0x8759, 0x9, 0x3, 0x1}, {0x1}, {0x5, 0xfb, 0x3, 0x9}, {0x1, 0x40, 0x0, 0x100}, {0x4, 0x6, 0x6}]}) [ 1027.851640] No source specified [ 1027.855907] 9pnet_fd: Insufficient options for proto=fd [ 1027.859139] loop4: detected capacity change from 0 to 4 [ 1027.860455] No source specified [ 1027.862921] FAULT_INJECTION: forcing a failure. [ 1027.862921] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.864596] CPU: 1 UID: 0 PID: 8482 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1027.864626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1027.864639] Call Trace: [ 1027.864647] [ 1027.864655] dump_stack_lvl+0xfa/0x120 [ 1027.864690] should_fail_ex+0x4d7/0x5e0 [ 1027.864729] should_failslab+0xc2/0x120 [ 1027.864760] __kmalloc_cache_noprof+0x73/0x6a0 [ 1027.864781] ? find_held_lock+0x2b/0x80 [ 1027.864814] ? __get_fs_type+0xe6/0x160 [ 1027.864842] ? alloc_fs_context+0x58/0x9e0 [ 1027.864872] ? alloc_fs_context+0x58/0x9e0 [ 1027.864895] ? _raw_read_unlock+0x1e/0x40 [ 1027.864917] alloc_fs_context+0x58/0x9e0 [ 1027.864947] path_mount+0xd87/0x2120 [ 1027.864976] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1027.865001] ? __pfx_path_mount+0x10/0x10 [ 1027.865029] ? kmem_cache_free+0x2a4/0x540 [ 1027.865051] ? putname.part.0+0x11b/0x160 [ 1027.865092] ? getname_flags.part.0+0x1c6/0x540 [ 1027.865115] ? putname.part.0+0x11b/0x160 [ 1027.865151] __x64_sys_mount+0x293/0x310 [ 1027.865179] ? __pfx___x64_sys_mount+0x10/0x10 [ 1027.865216] do_syscall_64+0xbf/0x390 [ 1027.865245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.865267] RIP: 0033:0x7f71d000eb19 [ 1027.865284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1027.865304] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1027.865325] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1027.865340] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1027.865353] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1027.865366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.865379] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1027.865407] [ 1027.910504] EXT4-fs: Mount option(s) incompatible with ext2 [ 1027.936400] loop4: detected capacity change from 0 to 4 [ 1027.947011] EXT4-fs: Mount option(s) incompatible with ext2 03:58:56 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:56 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@fscache}], [{@fsname={'fsname', 0x3d, 'ns/ipc\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, 'wfdno'}}, {@euid_lt}]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) io_submit(r1, 0x4, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000080)="17e1eb7f46f13b90ad0fb5398e57f59fd8680cb548977126ca2edb2a8e50fbfd576eb85c96f7dd73d6f32abbefaea6557f4985174c36d3d48946160acee48293bb5d5c7008ec4e381b6d097e8336621ebacc615349232bce8d42689386bafb097a", 0x61, 0x1f, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x4, r2, &(0x7f0000000180)="5d5e639ee126f4d08dd23fe0ddd9901f9823d2f4a2f64c3cf98e390b67a7531bd554eea79ac64e409ff85c2c2175993229b6097fb87d5778debf41dc20c9309347e5fa84133d", 0x46, 0x1, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000240)="c9", 0x1, 0x4, 0x0, 0x3, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0xee09, r6, &(0x7f0000000480)="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", 0x1000, 0x3, 0x0, 0x1}]) fork() 03:58:56 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) 03:58:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 11) 03:58:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:58:56 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:58:56 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x5}], 0x8, 0x0, &(0x7f0000000280)="e8e94eb8faf0e0ad"}) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r1, &(0x7f0000000240)=""/34, 0x22) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x9, 0x1, 0x7, 0x7, 0x0, 0xffff, 0xc13c8, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_config_ext={0x7, 0x1f}, 0x40818, 0x80000001, 0xfffffffd, 0x4, 0x59, 0x2, 0x4, 0x0, 0x6b, 0x0, 0x80000001}, 0x0, 0x0, r0, 0x1) fgetxattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f00000000c0)=""/96, 0x60) [ 1036.539494] 9pnet_fd: Insufficient options for proto=fd [ 1036.542550] loop4: detected capacity change from 0 to 4 [ 1036.546910] No source specified [ 1036.557528] No source specified [ 1036.558152] EXT4-fs: Mount option(s) incompatible with ext2 [ 1036.589607] loop4: detected capacity change from 0 to 4 03:58:56 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 1036.606869] EXT4-fs: Mount option(s) incompatible with ext2 03:58:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 12) 03:58:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x600000000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:58:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) r1 = io_uring_setup(0xaa6, &(0x7f0000000100)={0x0, 0x46cf, 0x2, 0x3, 0x376}) fcntl$dupfd(r0, 0x0, r1) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r2, &(0x7f0000000240)=""/34, 0x22) 03:58:56 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d7b16121d5885b7cb904ece9e30bca037bb437a9c7dfd36fbda6be3", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockname(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000040)=0x80) write(r1, &(0x7f0000000240)="ec", 0x1) [ 1036.686915] FAULT_INJECTION: forcing a failure. [ 1036.686915] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.687896] CPU: 0 UID: 0 PID: 8519 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1036.687914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1036.687921] Call Trace: [ 1036.687926] [ 1036.687931] dump_stack_lvl+0xfa/0x120 [ 1036.687954] should_fail_ex+0x4d7/0x5e0 [ 1036.687977] should_failslab+0xc2/0x120 [ 1036.687996] __kmalloc_cache_noprof+0x73/0x6a0 [ 1036.688008] ? trace_kmalloc+0x1f/0xb0 [ 1036.688025] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1036.688036] ? legacy_init_fs_context+0x44/0xe0 [ 1036.688055] ? legacy_init_fs_context+0x44/0xe0 [ 1036.688068] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1036.688089] legacy_init_fs_context+0x44/0xe0 [ 1036.688103] ? __pfx_legacy_init_fs_context+0x10/0x10 [ 1036.688118] alloc_fs_context+0x570/0x9e0 [ 1036.688135] path_mount+0xd87/0x2120 [ 1036.688153] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1036.688168] ? __pfx_path_mount+0x10/0x10 [ 1036.688184] ? kmem_cache_free+0x2a4/0x540 [ 1036.688197] ? putname.part.0+0x11b/0x160 [ 1036.688217] ? getname_flags.part.0+0x1c6/0x540 [ 1036.688230] ? putname.part.0+0x11b/0x160 [ 1036.688251] __x64_sys_mount+0x293/0x310 [ 1036.688267] ? __pfx___x64_sys_mount+0x10/0x10 [ 1036.688288] do_syscall_64+0xbf/0x390 [ 1036.688305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.688319] RIP: 0033:0x7f71d000eb19 [ 1036.688329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1036.688341] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1036.688354] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1036.688362] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1036.688370] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1036.688378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1036.688385] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1036.688401] [ 1036.723975] No source specified 03:58:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:58:56 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 1036.731800] No source specified [ 1036.735878] 9pnet_fd: Insufficient options for proto=fd [ 1036.752460] 9pnet_fd: Insufficient options for proto=fd 03:58:57 executing program 6: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) 03:58:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:58:57 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c776664866f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write(r2, &(0x7f0000000240)="ec", 0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x101500, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000340)={0xb04, 0x7, 0x6, 0x0, 0x6, [{0xffffffffffff0000, 0x80, 0x3c, '\x00', 0x1}, {0x4, 0xfffffffffffffffc, 0x7dc, '\x00', 0xd00}, {0x0, 0x5eb4, 0xba6, '\x00', 0x2484}, {0x2, 0x5, 0x4, '\x00', 0x2}, {0x80, 0x0, 0x10000, '\x00', 0x1}, {0x40, 0x1, 0x27820000000000, '\x00', 0x80}]}) [ 1036.848712] loop4: detected capacity change from 0 to 4 03:58:57 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:58:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 13) [ 1036.895829] EXT4-fs: Mount option(s) incompatible with ext2 [ 1036.907548] loop4: detected capacity change from 0 to 4 [ 1036.924394] EXT4-fs: Mount option(s) incompatible with ext2 [ 1036.954976] No source specified [ 1036.963395] No source specified 03:58:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:58:57 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 14) 03:58:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x1000000000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:58:57 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:58:57 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) [ 1037.175160] FAULT_INJECTION: forcing a failure. [ 1037.175160] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.176132] CPU: 0 UID: 0 PID: 8558 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1037.176148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.176155] Call Trace: [ 1037.176160] [ 1037.176165] dump_stack_lvl+0xfa/0x120 [ 1037.176186] should_fail_ex+0x4d7/0x5e0 [ 1037.176208] should_failslab+0xc2/0x120 [ 1037.176226] __kmalloc_cache_noprof+0x73/0x6a0 [ 1037.176239] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1037.176257] ? v9fs_mount+0x9d/0x9e0 [ 1037.176272] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1037.176292] ? v9fs_mount+0x9d/0x9e0 [ 1037.176306] v9fs_mount+0x9d/0x9e0 [ 1037.176321] ? __pfx_v9fs_mount+0x10/0x10 [ 1037.176336] ? cap_capable+0xdb/0x3b0 [ 1037.176355] ? __pfx_v9fs_mount+0x10/0x10 [ 1037.176369] legacy_get_tree+0x109/0x220 [ 1037.176385] vfs_get_tree+0x93/0x340 [ 1037.176398] path_mount+0x720/0x2120 [ 1037.176414] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1037.176429] ? __pfx_path_mount+0x10/0x10 [ 1037.176445] ? putname.part.0+0x11b/0x160 [ 1037.176463] ? getname_flags.part.0+0x1c6/0x540 [ 1037.176475] ? putname.part.0+0x11b/0x160 [ 1037.176494] __x64_sys_mount+0x293/0x310 [ 1037.176509] ? __pfx___x64_sys_mount+0x10/0x10 [ 1037.176529] do_syscall_64+0xbf/0x390 [ 1037.176545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.176558] RIP: 0033:0x7f71d000eb19 [ 1037.176567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.176578] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1037.176590] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1037.176598] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1037.176605] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1037.176612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1037.176619] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1037.176634] [ 1037.188671] loop4: detected capacity change from 0 to 4 [ 1037.214247] No source specified [ 1037.218226] No source specified [ 1037.243034] EXT4-fs: Mount option(s) incompatible with ext2 [ 1037.257202] loop4: detected capacity change from 0 to 4 [ 1037.270600] EXT4-fs: Mount option(s) incompatible with ext2 03:59:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 15) 03:59:06 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x801) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x81}}, './file0\x00'}) write(r1, &(0x7f0000000240)="ec", 0x1) 03:59:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xb, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:59:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x2000000000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:59:06 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:59:06 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:59:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="10b7", 0x2, r0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) pread64(r3, &(0x7f0000000080)=""/136, 0x88, 0x100) read(r1, &(0x7f0000000240)=""/34, 0x22) 03:59:06 executing program 6: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) [ 1046.050068] loop4: detected capacity change from 0 to 4 [ 1046.051772] No source specified [ 1046.054611] No source specified [ 1046.057798] EXT4-fs: Mount option(s) incompatible with ext2 [ 1046.066014] loop4: detected capacity change from 0 to 4 [ 1046.072589] EXT4-fs: Mount option(s) incompatible with ext2 03:59:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x2010000000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:59:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x18, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1046.172573] No source specified [ 1046.174007] No source specified [ 1046.175930] loop4: detected capacity change from 0 to 4 [ 1046.185679] EXT4-fs: Mount option(s) incompatible with ext2 [ 1046.194801] loop4: detected capacity change from 0 to 4 [ 1046.202422] EXT4-fs: Mount option(s) incompatible with ext2 03:59:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:59:15 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000100)="ec759afc779763532f3c4c6e7361df45dd6de300000000000000379c4aab2f3b190cc6db4ab6f0391a4ac5b769cb4c4cfc709c49020800d8030000000000a4bba80363000000e5a7d5467f2e1701fd18ef00d800"/94, 0x5e) 03:59:15 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 16) 03:59:15 executing program 6: creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) 03:59:15 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:59:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x1c, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:59:15 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfd04}, 0x0, 0x0, 0x2000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:59:15 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 1055.432686] FAULT_INJECTION: forcing a failure. [ 1055.432686] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.433702] CPU: 1 UID: 0 PID: 8617 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1055.433718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1055.433725] Call Trace: [ 1055.433730] [ 1055.433735] dump_stack_lvl+0xfa/0x120 [ 1055.433757] should_fail_ex+0x4d7/0x5e0 [ 1055.433778] should_failslab+0xc2/0x120 [ 1055.433796] __kmalloc_node_track_caller_noprof+0xc1/0x760 [ 1055.433811] ? kasan_save_track+0x14/0x30 [ 1055.433827] ? __kasan_kmalloc+0x7f/0x90 [ 1055.433842] ? v9fs_mount+0x9d/0x9e0 [ 1055.433860] ? legacy_get_tree+0x109/0x220 [ 1055.433874] ? v9fs_session_init+0xaa/0x17a0 [ 1055.433886] ? path_mount+0x720/0x2120 [ 1055.433900] ? __x64_sys_mount+0x293/0x310 [ 1055.433917] ? kstrdup+0x3e/0xc0 [ 1055.433929] kstrdup+0x3e/0xc0 [ 1055.433940] v9fs_session_init+0xaa/0x17a0 [ 1055.433952] ? do_raw_spin_lock+0x123/0x260 [ 1055.433970] ? find_held_lock+0x2b/0x80 [ 1055.433987] ? __create_object+0x59/0x80 [ 1055.434007] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1055.434019] ? __pfx_v9fs_session_init+0x10/0x10 [ 1055.434032] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1055.434044] ? __create_object+0x59/0x80 [ 1055.434062] ? trace_kmalloc+0x1f/0xb0 [ 1055.434081] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1055.434093] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1055.434116] v9fs_mount+0xbc/0x9e0 [ 1055.434131] ? __pfx_v9fs_mount+0x10/0x10 [ 1055.434146] ? cap_capable+0xdb/0x3b0 [ 1055.434165] ? __pfx_v9fs_mount+0x10/0x10 [ 1055.434179] legacy_get_tree+0x109/0x220 [ 1055.434193] vfs_get_tree+0x93/0x340 [ 1055.434206] path_mount+0x720/0x2120 [ 1055.434221] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1055.434235] ? __pfx_path_mount+0x10/0x10 [ 1055.434251] ? putname.part.0+0x11b/0x160 [ 1055.434269] ? getname_flags.part.0+0x1c6/0x540 [ 1055.434282] ? putname.part.0+0x11b/0x160 [ 1055.434301] __x64_sys_mount+0x293/0x310 [ 1055.434316] ? __pfx___x64_sys_mount+0x10/0x10 [ 1055.434336] do_syscall_64+0xbf/0x390 [ 1055.434352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.434366] RIP: 0033:0x7f71d000eb19 [ 1055.434375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1055.434386] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1055.434398] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1055.434406] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1055.434413] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1055.434420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1055.434427] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1055.434443] [ 1055.443178] No source specified [ 1055.481383] loop4: detected capacity change from 0 to 4 [ 1055.481548] No source specified [ 1055.485188] EXT4-fs: Mount option(s) incompatible with ext2 [ 1055.501602] loop4: detected capacity change from 0 to 4 [ 1055.504273] EXT4-fs: Mount option(s) incompatible with ext2 03:59:15 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xfffffffffffff2cf) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) unlink(&(0x7f0000000000)='./file0\x00') setresuid(0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c736d61636b66737472616e736d7574653d2e272a3a5b405c2c6575690100", @ANYRESDEC=r2, @ANYBLOB=',smackfstransmute=\\\'\',\x00']) write(r1, &(0x7f0000000240)="ec", 0x1) 03:59:15 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2182, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:59:15 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 17) 03:59:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xef08000000000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:59:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x66, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:59:15 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) 03:59:15 executing program 6: creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) 03:59:15 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 1055.638689] loop4: detected capacity change from 0 to 4 [ 1055.647959] No source specified [ 1055.649572] EXT4-fs: Mount option(s) incompatible with ext2 [ 1055.651311] No source specified [ 1055.661693] loop4: detected capacity change from 0 to 4 [ 1055.673136] EXT4-fs: Mount option(s) incompatible with ext2 03:59:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:59:15 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/lockdep', 0x402200, 0x4) ioctl$TCXONC(r1, 0x540a, 0x3) r2 = getpid() pidfd_open(r2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x83, 0x65, 0x0, 0x5, 0x0, 0x4, 0x10, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, 0x1, @perf_config_ext={0x6, 0x6}, 0x800, 0x3ff, 0x7, 0x1, 0x7, 0xffff, 0xfffd, 0x0, 0x2, 0x0, 0xff}, r2, 0x3, r3, 0x0) 03:59:15 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:59:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xbe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1055.770950] loop4: detected capacity change from 0 to 4 [ 1055.777247] EXT4-fs: Mount option(s) incompatible with ext2 [ 1055.790478] loop4: detected capacity change from 0 to 4 [ 1055.798817] EXT4-fs: Mount option(s) incompatible with ext2 [ 1055.805910] No source specified [ 1055.813580] No source specified 03:59:16 executing program 6: creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) [ 1056.609106] syz-executor.1 (8653) used greatest stack depth: 23328 bytes left 03:59:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 18) 03:59:25 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:59:25 executing program 6: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r0}}}], 0x28}}], 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r3}}}], 0x28}}], 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4a6120, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 03:59:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xbf, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:59:25 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, 0x0, 0x0) 03:59:25 executing program 7: r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f00000000c0)=0x5) pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x4000, 0x0) read(r1, &(0x7f0000000240)=""/34, 0x22) 03:59:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xf9fdffff00000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:59:25 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write(r2, &(0x7f0000000240)="ec", 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r5]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = syz_io_uring_setup(0x19e, &(0x7f00000015c0)={0x0, 0xf410, 0x10, 0x1, 0x2f4, 0x0, r0}, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001640), &(0x7f0000001680)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {0xf}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000020c0)={&(0x7f0000001d00)=@migrate={0x3a0, 0x21, 0x8, 0x70bd25, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@empty, 0x4e23, 0x500, 0x4e20, 0x0, 0x0, 0xa0, 0x20, 0x67}, 0x6e6bb2}, [@proto={0x5, 0x19, 0xff}, @proto={0x5, 0x19, 0x86}, @user_kmaddress={0x2c, 0x13, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x0, 0xa}}, @sec_ctx={0xd4, 0x8, {0xd0, 0x8, 0x0, 0xff, 0xc8, "7fddd238748b944d94925af4c44c755f612b1cee45ffb990ec269e404ac5e8fa21866512034c17878219f97fe3c5c26bde91fbf1b05561eb5daf6ca399d3345c59d10f8fe9bfcb9f2db92474b29648aabeb088d8e36d5a06eaf0491fb75d54be9450ba205c55e14da9fd3c60a2e397e04da7016b8ee2339cf7417e7cb9b4c830467cf08c8d3d8d8e20f8b2a7d8a6549fb76478bc0beda7d84ed33a18bd829be984cee3bb2476c3863ac21730686ddb389f2bc41220c605dc4c234ac11e95f137d33ff8b745922b8a"}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast2, 0x4e23, 0x8000, 0x4e21, 0x100, 0xa, 0x180, 0x20, 0x3b, 0x0, r4}, {0x6, 0x5, 0x101, 0x8, 0x1, 0xfffffffffffffffc, 0x1f, 0x8}, {0xff, 0x81, 0x4, 0x8}, 0x6, 0x0, 0x2, 0x0, 0x1, 0x2}}, @algo_comp={0xc3, 0x3, {{'deflate\x00'}, 0x3d8, "9e35e3c1da36795dc3683a747c173026362d250302b895b51053cbdb303ec175fbb1d91ed563aba79b37b197b3939aacc0db8dea61146c556a33aec9cacd96098e44c3f2b40ba93754f28179048f0278b306ce73221c79488e4b4d5be0b3fd5f2c1b6e99d271bc1c3fbcaef74a3ff19e149fa08f3aece4f9dbe308"}}, @algo_aead={0xc5, 0x12, {{'generic-gcm-aesni\x00'}, 0x3c8, 0x0, "e9665c85498feb3e9e9b30493671d2c99d29efbf93195d4394a0532f675378b489b16c25d1307d01dd7bae599fa43c4cbd1dc38ad14e5350ef0e11f9eda682f91f6ebae926b5b34a5e6ffb99f5123ecb6223dfc5fa7c61c014cd3b1b52065bf7854501705d6ec4b0b7017b2c3610148b52646517b63ee9d822"}}, @XFRMA_IF_ID={0x8}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x20000010}, 0x2404c881) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@noextend}]}}) ppoll(&(0x7f00000016c0)=[{r1, 0x8000}, {r6, 0x6000}, {r8, 0x3100}, {r10, 0x2000}], 0x4, &(0x7f0000001700)={0x77359400}, &(0x7f0000001740)={[0x3]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@noextend}]}}) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000000200)={0x0, 0x72a}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000001580)=0xc) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000100)='./file0/file0\x00', 0x8, 0x3, &(0x7f0000001440)=[{&(0x7f0000000140)="5ce30199e2ae56cc698c9a141e3f140df2e1f2e6f6524872316a02521c2c16167493f0f6ec12f784fba0b3a2e876199400d65208ec816bf1e0bd4278be1d68368ee8a2a0bf82a23839345f27aceea6d07e92415a208e683d04a01c40fd38a7280fffb126295fa7373359b9ed3c8609f02de00ad6248b7dbae3db3bf385205131f1d1b54ab451f8f46945a7672026c39718108a2bb1064cfd", 0x98, 0x2}, {&(0x7f0000000340)="10072ed3c5e109ee18ab1014da9266ed8f9277ff1212e538b6b13b1b2302c0336cb69f8dbbaae4846992f036effce9b64783368e0ed24693dc2db0c7792275c9c061a178fbb72d8acc7ca0fc53c643274a99c63193163421dd63db360ead727241405a026217ab761a5d819ed892a798de4cc7bab94c454e2afead3f54eb7e1c612670e902ee3683f5b2cf2d07fdf22cb4dc36cea55871700dc63782f91f881001778899c19992e1e9c6a5eff386b9c21de61e000f4e8c95892b182d9f1f0c42fa6ac2a668091290724c8e56897720535284e70d32d18ac698e7fb26e05c1ebce5", 0xe1, 0x1000}, {&(0x7f0000000440)="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", 0x1000, 0x101}], 0x8000, &(0x7f00000014c0)={[{@mode={'mode', 0x3d, 0x4}}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x38, 0x34, 0x35, 0x32, 0x25]}}, {@gid={'gid', 0x3d, r5}}, {@mode={'mode', 0x3d, 0x1}}], [{@smackfsdef}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsname={'fsname', 0x3d, 'trans=fd,'}}, {@subj_user={'subj_user', 0x3d, '9p\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000001780)={0x0, 0x80, 0x36, 0x4, 0x81, 0x3f, 0x0, 0x8, 0x12804, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xba0f, 0x8}, 0x80, 0x101, 0x8, 0x5, 0x0, 0x7b4, 0x0, 0x0, 0x9d, 0x0, 0xd}) [ 1065.758055] loop4: detected capacity change from 0 to 4 [ 1065.761447] EXT4-fs: Mount option(s) incompatible with ext2 [ 1065.770941] loop4: detected capacity change from 0 to 4 [ 1065.773629] EXT4-fs: Mount option(s) incompatible with ext2 03:59:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xf0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1065.815144] No source specified [ 1065.823472] No source specified [ 1065.825620] FAULT_INJECTION: forcing a failure. [ 1065.825620] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.827545] CPU: 0 UID: 0 PID: 8679 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1065.827576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1065.827589] Call Trace: [ 1065.827597] [ 1065.827606] dump_stack_lvl+0xfa/0x120 [ 1065.827640] should_fail_ex+0x4d7/0x5e0 [ 1065.827680] should_failslab+0xc2/0x120 [ 1065.827711] __kmalloc_node_track_caller_noprof+0xc1/0x760 [ 1065.827740] ? kasan_save_track+0x14/0x30 [ 1065.827770] ? __kasan_kmalloc+0x7f/0x90 [ 1065.827798] ? v9fs_mount+0x9d/0x9e0 [ 1065.827826] ? v9fs_session_init+0xeb/0x17a0 [ 1065.827855] ? kstrdup+0x3e/0xc0 [ 1065.827877] kstrdup+0x3e/0xc0 [ 1065.827898] v9fs_session_init+0xeb/0x17a0 [ 1065.827922] ? do_raw_spin_lock+0x123/0x260 [ 1065.827955] ? find_held_lock+0x2b/0x80 [ 1065.827988] ? __create_object+0x59/0x80 [ 1065.828024] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1065.828063] ? __pfx_v9fs_session_init+0x10/0x10 [ 1065.828093] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1065.828115] ? __create_object+0x59/0x80 [ 1065.828149] ? trace_kmalloc+0x1f/0xb0 [ 1065.828176] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1065.828198] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1065.828240] v9fs_mount+0xbc/0x9e0 [ 1065.828267] ? __pfx_v9fs_mount+0x10/0x10 [ 1065.828295] ? cap_capable+0xdb/0x3b0 [ 1065.828329] ? __pfx_v9fs_mount+0x10/0x10 [ 1065.828356] legacy_get_tree+0x109/0x220 [ 1065.828384] vfs_get_tree+0x93/0x340 [ 1065.828406] path_mount+0x720/0x2120 [ 1065.828435] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1065.828461] ? __pfx_path_mount+0x10/0x10 [ 1065.828491] ? putname.part.0+0x11b/0x160 [ 1065.828523] ? getname_flags.part.0+0x1c6/0x540 [ 1065.828546] ? putname.part.0+0x11b/0x160 [ 1065.828581] __x64_sys_mount+0x293/0x310 [ 1065.828611] ? __pfx___x64_sys_mount+0x10/0x10 [ 1065.828648] do_syscall_64+0xbf/0x390 [ 1065.828679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.828702] RIP: 0033:0x7f71d000eb19 [ 1065.828719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1065.828741] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1065.828762] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1065.828777] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1065.828791] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1065.828804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1065.828817] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1065.828846] [ 1065.858477] loop4: detected capacity change from 0 to 4 [ 1065.906745] EXT4-fs: Mount option(s) incompatible with ext2 03:59:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0xffffffff00000000, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 1065.920204] loop4: detected capacity change from 0 to 4 [ 1065.927686] EXT4-fs: Mount option(s) incompatible with ext2 [ 1066.010541] loop2: detected capacity change from 0 to 16 [ 1066.042547] No source specified [ 1066.046631] No source specified [ 1066.104626] loop2: detected capacity change from 0 to 16 [ 1066.145762] 9pnet: Found fid 0 not clunked 03:59:35 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 19) 03:59:35 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xc5, 0x8, &(0x7f0000001680)=[{&(0x7f0000000100)="8269bcabd4031a572ed44d29d108db299be240af8c0e4e04a988b27587e27329fa433e3d3f76cb44dbee7b9d76cc83caf5e9252ce755e80575cf1f6bccee21a9efd009279453b70abad26b504f0014dd1e2d6087358c2f3f33a3188028333f4413a33c2515f71b4ee9d56b7ccfc2cf99919ffbfd273a24cde0b64452bd3249bf580b0e2ecabde1893aaa0fdcad55441f23649e42144a2e04db90", 0x9a, 0x200}, {&(0x7f0000000280)="03ae8b0302388dc8a59b7ae1b4a9cfaaaf82ad9e7abf3c79846cdd3190a74e35cd201ca640717ea21f7c3f0a7d3495a581fa9ac6f037636fd59d5ac10d98ff39c3c7b67867f345bf270dff7d7a798a029b687b8e57629dee013037c0f58f1a4cb84d858f6dcef62432471c2d46b9564e9ae0c05f56edb22c2bf321a69da1c43ec0d8810ed7694e3be4aa7cfb9b69234f", 0x90, 0x1}, {&(0x7f0000000340)="61b38767a688fef7442c33e6f1ab116e9ba7896ff0eed08f59442dde48966e95e1b798cae87e648037957edc6a3e022d756c5e088938ef3dba470a908bac3ab0f9347296128e6d03bd1f9454e70e509b2b1ffb1cd031271bc1037ff60901d24673b3f0cf224e693bc7f9d0274dc692fa54a213b24cdc28135bcb484b51e1bfacf80d540f68f2b78ffab9fdcbaa595d3cade2baf16698e2bf80f0839f6b872fbb54c9335cd36c477b2b018e01dd528f8d0559c92896be93348ba27cec061baddd0aa615ca215d97d93329916163275529", 0xd0, 0x8}, {&(0x7f00000001c0)="f98ac190d7f6828cda6c398be9870a6adc759c2535", 0x15, 0x9}, {&(0x7f0000000440)="6c01d54c22ef86a604745dbf0d027f88a37b335c4a49ad12e513f6c95596720d4375ec6b53f9421b3185dc30c78e6758520a72588d3b2e474735766abbbfb3bf73f38461a52fc4a3cde114c6b5a2fd4fd131847b2d7af9bed5d4669bb54e7001f66008789330a5747c5a5dde7007f80e1dc5c002314355573701c3d43d97c2b305ac407cc9c2fc85ff67816aaa7b7cd553f66080653971c364993bb62a29c8d024a8fa92b38d21f421988a10a18f6a1403b0bfa3f1ee4aad6528", 0xba, 0x6}, {&(0x7f0000000500)="7cf7d0e5be3f4bbd05b9e2f35c0a06a1606c082337392e7fee3fa97683a620f67fcb2c4188b5d630db2364cfae58dee7eeb7334bc7abde371867012ff9e8799667bb9f0f5e7037ec2534f5e937a9487c7999d485e6b63d1f6c67a37f350f7f051ef5bd5fe6b228a03d7594b857c7aacd390407b70c47c7", 0x77, 0x1}, {&(0x7f0000000580)="848699c4c9a6281cefa79e222997e6b3d465119548a0650846b1a44a6201994c7a4a6d9aa7cb9a2891983afe37fd69d5d8a87e5f00bcc0638b65286bcc79179068fe0c964f5b757033a0cd6f59b5f4308d9c8311c0b45e40d8ef3e69aee017d9855f8ce59d3aac43014e10d4ecb05f9b5ee3b216fe4fd22175dc30e9253cc18a86e535d7db64f56d41b766faeca4f188d141c6e53298df8e67988497b3379570bd537e888063ef7f847f60aeeba284d8b689e9375b26fa8680808a386012b16849457fd176b33b4a4a49be472356f92d454c02ae37cb", 0xd6, 0x1}, {&(0x7f0000000680)="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", 0x1000, 0xb599}], 0x88000, &(0x7f0000001740)=ANY=[@ANYBLOB='/dev/vcsu#\x00,/dev/vcsu#\x00,\'\',/]$^*_!/#,,/dev/vcsu!\x00,\x00']) syz_open_dev$vcsu(&(0x7f0000001780), 0xfffffffffffffd16, 0x430000) 03:59:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xf5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:59:35 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:59:35 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) 03:59:35 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, 0x0, 0x0) 03:59:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:59:35 executing program 6: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r0}}}], 0x28}}], 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r3}}}], 0x28}}], 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4a6120, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 1075.777585] loop4: detected capacity change from 0 to 4 [ 1075.787401] EXT4-fs: Mount option(s) incompatible with ext2 [ 1075.795037] loop4: detected capacity change from 0 to 4 [ 1075.807509] loop7: detected capacity change from 0 to 181 [ 1075.808966] EXT4-fs: Mount option(s) incompatible with ext2 [ 1075.843740] loop7: detected capacity change from 0 to 181 [ 1075.857373] No source specified [ 1075.865593] No source specified 03:59:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xfe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:59:36 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='tran$\x00o=', @ANYRESHEX=r0, @ANYBLOB="000000100001000000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write(r1, &(0x7f0000000240)="ec", 0x1) [ 1075.958028] loop4: detected capacity change from 0 to 4 [ 1075.966800] EXT4-fs: Mount option(s) incompatible with ext2 03:59:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:59:36 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) r1 = getpid() r2 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, 0x0) pidfd_open(r1, 0x0) clone3(&(0x7f0000000380)={0x2000040, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0xa}, &(0x7f0000000280)=""/217, 0xd9, &(0x7f0000000140)=""/78, &(0x7f00000001c0)=[0x0, r1, 0xffffffffffffffff, 0x0], 0x4, {r0}}, 0x58) 03:59:36 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 20) 03:59:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:59:36 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10040, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c8d66646e6fd5", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write(r1, &(0x7f0000000240)="ec", 0x1) 03:59:36 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, 0x0, 0x0) [ 1076.092797] 9pnet_fd: Insufficient options for proto=fd [ 1076.099792] 9pnet_fd: Insufficient options for proto=fd [ 1076.100464] loop4: detected capacity change from 0 to 4 [ 1076.113793] EXT4-fs: Mount option(s) incompatible with ext2 [ 1076.123255] loop4: detected capacity change from 0 to 4 [ 1076.128492] EXT4-fs: Mount option(s) incompatible with ext2 [ 1076.134193] No source specified [ 1076.135503] No source specified [ 1076.147068] FAULT_INJECTION: forcing a failure. [ 1076.147068] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.148785] CPU: 0 UID: 0 PID: 8745 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1076.148815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.148829] Call Trace: [ 1076.148837] [ 1076.148845] dump_stack_lvl+0xfa/0x120 [ 1076.148881] should_fail_ex+0x4d7/0x5e0 [ 1076.148920] should_failslab+0xc2/0x120 [ 1076.148951] __kmalloc_cache_noprof+0x73/0x6a0 [ 1076.148971] ? __lock_acquire+0xc65/0x1b70 [ 1076.148999] ? p9_client_create+0xc0/0x11d0 [ 1076.149036] ? p9_client_create+0xc0/0x11d0 [ 1076.149068] p9_client_create+0xc0/0x11d0 [ 1076.149105] ? do_raw_spin_lock+0x123/0x260 [ 1076.149137] ? __create_object+0x59/0x80 [ 1076.149172] ? __pfx_p9_client_create+0x10/0x10 [ 1076.149204] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1076.149226] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1076.149253] ? kasan_save_track+0x14/0x30 [ 1076.149283] ? __kasan_kmalloc+0x7f/0x90 [ 1076.149312] ? trace_kmalloc+0x1f/0xb0 [ 1076.149339] ? __kmalloc_node_track_caller_noprof+0x2ce/0x760 [ 1076.149366] ? kasan_save_track+0x14/0x30 [ 1076.149394] ? __kasan_kmalloc+0x7f/0x90 [ 1076.149421] ? v9fs_mount+0x9d/0x9e0 [ 1076.149448] ? v9fs_session_init+0xeb/0x17a0 [ 1076.149471] ? lockdep_init_map_type+0x4b/0x240 [ 1076.149498] ? __raw_spin_lock_init+0x3a/0x110 [ 1076.149531] v9fs_session_init+0x1df/0x17a0 [ 1076.149554] ? do_raw_spin_lock+0x123/0x260 [ 1076.149584] ? find_held_lock+0x2b/0x80 [ 1076.149615] ? __create_object+0x59/0x80 [ 1076.149649] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1076.149672] ? __pfx_v9fs_session_init+0x10/0x10 [ 1076.149695] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1076.149717] ? __create_object+0x59/0x80 [ 1076.149752] ? trace_kmalloc+0x1f/0xb0 [ 1076.149778] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1076.149800] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1076.149842] v9fs_mount+0xbc/0x9e0 [ 1076.149869] ? __pfx_v9fs_mount+0x10/0x10 [ 1076.149897] ? cap_capable+0xdb/0x3b0 [ 1076.149931] ? __pfx_v9fs_mount+0x10/0x10 [ 1076.149958] legacy_get_tree+0x109/0x220 [ 1076.149986] vfs_get_tree+0x93/0x340 [ 1076.150008] path_mount+0x720/0x2120 [ 1076.150036] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1076.150061] ? __pfx_path_mount+0x10/0x10 [ 1076.150091] ? putname.part.0+0x11b/0x160 [ 1076.150123] ? getname_flags.part.0+0x1c6/0x540 [ 1076.150146] ? putname.part.0+0x11b/0x160 [ 1076.150182] __x64_sys_mount+0x293/0x310 [ 1076.150210] ? __pfx___x64_sys_mount+0x10/0x10 [ 1076.150241] ? trace_irq_enable.constprop.0+0x26/0x100 [ 1076.150267] do_syscall_64+0xbf/0x390 [ 1076.150297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.150319] RIP: 0033:0x7f71d000eb19 [ 1076.150335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.150356] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1076.150377] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1076.150392] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1076.150406] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1076.150419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1076.150431] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1076.150459] 03:59:36 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0xe) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="747203baf2480400000066646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write(r1, &(0x7f0000000240)="ec", 0x1) 03:59:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:59:46 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r1, &(0x7f0000000240)=""/34, 0x22) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x7d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) dup2(r2, r4) 03:59:46 executing program 6: timer_delete(0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x800000, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000800000000000000000000000000b56e23879883c4b76319eb248155d5f6cb8a0fd6cc53f3e132b1ff91fab48230992156398f9b74d52de5a884662caacc3a8f2aef73b243de995497a242fbc965a7c55da1107a8c40a81dffa67c8b6fad6419f2547ed53732fc125b1d4e"]) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)="70507bf77c48ad7b0db9c9db248970d7d844bc5c657d22d937117e8e2f163b8e861d377154e7738c4dfb15dcdb4360bf1b789ae3a2dc841d49441500c1b826436dc238633bf05ab554add68ec0491802a1", 0x51, 0xffffffff}, {&(0x7f0000000180)="6c8e072b527b8f750b0a9491538465ce77c0a7caf3e695fe5b9a304fef32aa2d345106446193338e210a4406501ee4bdad980fd85e5c7d0d66049482578b7283bb598a836efe89c620be94fd4393e5a7fb2ca04babe28abe766509606837db84e4ee38ec8aab12315f0a9129246acf45f7997eb5edc933d01047dff7e9b7948d10cfcfbdb8b523cbd1", 0x89, 0x1}, {&(0x7f00000002c0)="02c4d5b91591bbfaf3f4dab8f672080174da4b1c", 0x14, 0x9}], 0x1000000, &(0x7f0000000380)={[{@nr_inodes={'nr_inodes', 0x3d, [0x36]}}, {@size={'size', 0x3d, [0x33, 0x0, 0x2d, 0x78, 0x4a, 0x38, 0x70]}}, {@huge_never}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x40}}], [{@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '+{+{*'}}, {@smackfshat={'smackfshat', 0x3d, ')--\x82'}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'iso9660\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfsroot={'smackfsroot', 0x3d, ']'}}]}) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000004c0)={{r1, r2+10000000}, {0x77359400}}, &(0x7f0000000500)) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="38eacd888fc6939ef648bb4525d4adf15c13afd32545c2885b2b8f8aa2da29c10087354b6c538a6839ad0a3763c2781c7e9279fb09f5e094c01d5508182462625beb7ffe72a8c9e2655450bf82817294ba3fb4dfae6b69579033dbccb6dbcd8e5085d728a722aa4cf15388d157534128724fe4aac4f838e364a4"], &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='rpc_pipefs\x00', 0x2018019, 0x0) 03:59:46 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20020, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/15, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='?\x00']) write(r1, &(0x7f0000000240)="ec", 0x1) 03:59:46 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240), 0x0) 03:59:46 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 21) 03:59:46 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:59:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x480, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1086.175199] loop4: detected capacity change from 0 to 4 [ 1086.188311] EXT4-fs: Mount option(s) incompatible with ext2 [ 1086.191011] No source specified [ 1086.200053] loop4: detected capacity change from 0 to 4 [ 1086.200852] No source specified [ 1086.210205] EXT4-fs: Mount option(s) incompatible with ext2 [ 1086.221522] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1086.224850] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32 03:59:46 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'rfdno'}, {0x20, '9p\x00'}, {0x20, '$\\%\'$$-@\')^:\xc2\'.*\x86,'}, {0x20, 'rfdno'}, {}, {}, {0x20, 'trans=fd,'}], 0xa, "5059f30b11a9d7e4b6060487e89395faaaee71c98d8aa134108573dc6b03f20ef956a60707c9c949e814f4abc5d4e66193708b0aceb9df1f6cdb7ff05ba4fa667b3b056b0df3b1e1f09caec36f7bae3569db911b1b120893073b62faa040117d71a0f2cc71925e277afee446ac4a32ece969ccada3fd29dceb0e353265337d153e5ec1b23e42766be51f834ddef29fecd450079b534129683b6171b7a875974a4ff71af0d29d9a1faf13c497d42f81d3818e56a4d58fc713964875da1995d7167c0a5d176b613530fa61101e6001f508f20aaa11dc70"}, 0x110) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) [ 1086.257345] loop6: detected capacity change from 0 to 264192 03:59:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x500, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:59:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:59:46 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 22) 03:59:46 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x7f, 0x6, 0x0, 0x81, 0x34059, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000000100)}, 0xb0, 0x3, 0x6, 0x3, 0x65b, 0xf18, 0x5, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x10, r0, 0x0) read(r1, &(0x7f0000000080)=""/81, 0x51) read(r1, &(0x7f0000000240)=""/34, 0x22) [ 1086.368133] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1086.371665] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32 03:59:46 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240), 0x0) [ 1086.405387] loop4: detected capacity change from 0 to 4 [ 1086.412213] FAULT_INJECTION: forcing a failure. [ 1086.412213] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.412789] No source specified [ 1086.413138] CPU: 1 UID: 0 PID: 8792 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1086.413156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1086.413163] Call Trace: [ 1086.413168] [ 1086.413173] dump_stack_lvl+0xfa/0x120 [ 1086.413195] should_fail_ex+0x4d7/0x5e0 [ 1086.413218] should_failslab+0xc2/0x120 [ 1086.413237] __kmalloc_node_track_caller_noprof+0xc1/0x760 [ 1086.413254] ? trace_kmalloc+0x1f/0xb0 [ 1086.413270] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1086.413281] ? __lock_acquire+0xc65/0x1b70 [ 1086.413296] ? p9_client_create+0x487/0x11d0 [ 1086.413319] ? kstrdup+0x3e/0xc0 [ 1086.413331] kstrdup+0x3e/0xc0 [ 1086.413343] p9_client_create+0x487/0x11d0 [ 1086.413364] ? __create_object+0x59/0x80 [ 1086.413384] ? __pfx_p9_client_create+0x10/0x10 [ 1086.413402] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1086.413416] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1086.413431] ? kasan_save_track+0x14/0x30 [ 1086.413449] ? __kasan_kmalloc+0x7f/0x90 [ 1086.413466] ? trace_kmalloc+0x1f/0xb0 [ 1086.413482] ? __kmalloc_node_track_caller_noprof+0x2ce/0x760 [ 1086.413497] ? kasan_save_track+0x14/0x30 [ 1086.413513] ? __kasan_kmalloc+0x7f/0x90 [ 1086.413529] ? v9fs_mount+0x9d/0x9e0 [ 1086.413545] ? v9fs_session_init+0xeb/0x17a0 [ 1086.413559] ? lockdep_init_map_type+0x4b/0x240 [ 1086.413574] ? __raw_spin_lock_init+0x3a/0x110 [ 1086.413594] v9fs_session_init+0x1df/0x17a0 [ 1086.413607] ? do_raw_spin_lock+0x123/0x260 [ 1086.413624] ? find_held_lock+0x2b/0x80 [ 1086.413643] ? __create_object+0x59/0x80 [ 1086.413663] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1086.413676] ? __pfx_v9fs_session_init+0x10/0x10 [ 1086.413689] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1086.413702] ? __create_object+0x59/0x80 [ 1086.413722] ? trace_kmalloc+0x1f/0xb0 [ 1086.413737] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1086.413750] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1086.413774] v9fs_mount+0xbc/0x9e0 [ 1086.413790] ? __pfx_v9fs_mount+0x10/0x10 [ 1086.413806] ? cap_capable+0xdb/0x3b0 [ 1086.413826] ? __pfx_v9fs_mount+0x10/0x10 [ 1086.413842] legacy_get_tree+0x109/0x220 [ 1086.413858] vfs_get_tree+0x93/0x340 [ 1086.413871] path_mount+0x720/0x2120 [ 1086.413887] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1086.413902] ? __pfx_path_mount+0x10/0x10 [ 1086.413919] ? putname.part.0+0x11b/0x160 [ 1086.413937] ? getname_flags.part.0+0x1c6/0x540 [ 1086.413950] ? putname.part.0+0x11b/0x160 [ 1086.413971] __x64_sys_mount+0x293/0x310 [ 1086.413987] ? __pfx___x64_sys_mount+0x10/0x10 [ 1086.414008] do_syscall_64+0xbf/0x390 [ 1086.414025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.414038] RIP: 0033:0x7f71d000eb19 [ 1086.414048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1086.414060] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1086.414077] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1086.414086] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1086.414093] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1086.414101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1086.414108] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1086.414124] [ 1086.474548] EXT4-fs: Mount option(s) incompatible with ext2 03:59:46 executing program 7: mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="9ef1f72b38f9e3b3c93a3d040db7c4d5d67222d3958f788e4bcc6c131f5500d2cce558e322bbcd8d9c4da77a1cd28755e9", 0x31, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noeotendC\x00']) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000280)={0x6, 0x100, 0x2, 0x1, 0x6, [{0x9, 0x80, 0x9, '\x00', 0x4004090311d1d5f2}, {0x46, 0x2, 0x2, '\x00', 0x3001}, {0x7ff, 0x3ff, 0x6, '\x00', 0x1800}, {0x4, 0x5, 0x5, '\x00', 0x2806}, {0x1ff, 0x1, 0x6, '\x00', 0x2888}, {0x1, 0x8, 0x3, '\x00', 0x1e06}]}) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r2, &(0x7f0000000240)=""/34, 0x22) [ 1086.491503] loop4: detected capacity change from 0 to 4 [ 1086.499905] EXT4-fs: Mount option(s) incompatible with ext2 [ 1086.510768] No source specified 03:59:46 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x7f, 0x6, 0x0, 0x81, 0x34059, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000000100)}, 0xb0, 0x3, 0x6, 0x3, 0x65b, 0xf18, 0x5, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x10, r0, 0x0) read(r1, &(0x7f0000000080)=""/81, 0x51) read(r1, &(0x7f0000000240)=""/34, 0x22) 03:59:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x600, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:59:46 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 23) 03:59:46 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/net\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000380)={0x0, 0x3, 0x6, 0x7}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = fcntl$dupfd(r0, 0x406, r0) unlinkat(r4, &(0x7f0000000040)='./file0\x00', 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000100), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000001600)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/249, 0xf9}, {&(0x7f0000001500)=""/198, 0xc6}, {&(0x7f0000002a40)=""/156, 0x9c}], 0x6, &(0x7f0000000280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000001740), 0x6e, &(0x7f00000018c0)=[{&(0x7f00000017c0)=""/128, 0x80}, {&(0x7f0000001840)=""/121, 0x79}], 0x2, &(0x7f0000001900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000001b40)=[{&(0x7f00000019c0)=""/174, 0xae}, {&(0x7f0000001a80)=""/137, 0x89}], 0x2, &(0x7f0000001b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001c00)=@abs, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001c80)=""/251, 0xfb}, {&(0x7f0000001d80)=""/229, 0xe5}, {&(0x7f0000001e80)=""/43, 0x2b}, {&(0x7f0000001ec0)=""/192, 0xc0}], 0x4}}, {{&(0x7f0000001fc0), 0x6e, &(0x7f0000002140), 0x0, &(0x7f0000002180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000002240), 0x6e, &(0x7f0000002780)=[{&(0x7f00000022c0)=""/52, 0x34}, {&(0x7f0000002300)=""/44, 0x2c}, {&(0x7f0000002340)=""/89, 0x59}, {&(0x7f00000023c0)=""/156, 0x9c}, {&(0x7f0000002480)=""/22, 0x16}, {&(0x7f00000024c0)=""/140, 0x8c}, {&(0x7f0000002580)=""/174, 0xae}, {&(0x7f0000002640)=""/33, 0x21}, {&(0x7f0000002680)=""/83, 0x53}, {&(0x7f0000002700)=""/70, 0x46}], 0xa, &(0x7f0000002840)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}], 0x6, 0x0, 0x0) write(r3, &(0x7f0000000240)="ec", 0x1) [ 1086.645906] loop4: detected capacity change from 0 to 4 [ 1086.658122] EXT4-fs: Mount option(s) incompatible with ext2 [ 1086.672787] loop4: detected capacity change from 0 to 4 [ 1086.680190] EXT4-fs: Mount option(s) incompatible with ext2 03:59:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x700, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 03:59:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 03:59:55 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 03:59:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) 03:59:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 24) 03:59:55 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080001000000000008001d00", @ANYRES32=r2, @ANYBLOB="47d4cf1ba25a55e59a3285571026464e9eca4f207e573441871aeb291d883f89ce5b701d3fd4bf55a59fbd62c9562a3f34dbea6b482fb595fb0fd65095422d498bcb8f8e1c19a682690623d802a8a89467705a34a069363f90b35aec7d04c5e9f3e0d0c8b6b4e46f29d3678baebf7b6d67fe691e9e7ade6ef3150151fc3a262ac5a6614b7dcdb8d6e57812223c4fb07d2b4f608d6cf0f9c1ba099f8e908f86c62955a88089fbd259c565e4cfad605868"], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x5c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x801) 03:59:55 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) write(r1, &(0x7f0000000240)="ec", 0x1) 03:59:55 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240), 0x0) [ 1094.843332] loop4: detected capacity change from 0 to 4 [ 1094.848295] FAULT_INJECTION: forcing a failure. [ 1094.848295] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.849215] CPU: 1 UID: 0 PID: 8823 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1094.849231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1094.849238] Call Trace: [ 1094.849243] [ 1094.849247] dump_stack_lvl+0xfa/0x120 [ 1094.849270] should_fail_ex+0x4d7/0x5e0 [ 1094.849291] should_failslab+0xc2/0x120 [ 1094.849309] __kmalloc_node_track_caller_noprof+0xc1/0x760 [ 1094.849325] ? p9_client_create+0x588/0x11d0 [ 1094.849343] ? __pfx_match_token+0x10/0x10 [ 1094.849357] ? kmemdup_nul+0x3b/0xa0 [ 1094.849368] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1094.849383] kmemdup_nul+0x3b/0xa0 [ 1094.849395] p9_client_create+0x588/0x11d0 [ 1094.849415] ? __pfx_p9_client_create+0x10/0x10 [ 1094.849432] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1094.849445] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1094.849460] ? kasan_save_track+0x14/0x30 [ 1094.849476] ? __kasan_kmalloc+0x7f/0x90 [ 1094.849492] ? trace_kmalloc+0x1f/0xb0 [ 1094.849507] ? __kmalloc_node_track_caller_noprof+0x2ce/0x760 [ 1094.849521] ? kasan_save_track+0x14/0x30 [ 1094.849537] ? v9fs_session_init+0xeb/0x17a0 [ 1094.849550] ? lockdep_init_map_type+0x4b/0x240 [ 1094.849567] ? __raw_spin_lock_init+0x3a/0x110 [ 1094.849585] v9fs_session_init+0x1df/0x17a0 [ 1094.849596] ? do_raw_spin_lock+0x123/0x260 [ 1094.849612] ? find_held_lock+0x2b/0x80 [ 1094.849630] ? __create_object+0x59/0x80 [ 1094.849650] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1094.849662] ? __pfx_v9fs_session_init+0x10/0x10 [ 1094.849674] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1094.849686] ? __create_object+0x59/0x80 [ 1094.849704] ? trace_kmalloc+0x1f/0xb0 [ 1094.849718] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1094.849730] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1094.849753] v9fs_mount+0xbc/0x9e0 [ 1094.849769] ? __pfx_v9fs_mount+0x10/0x10 [ 1094.849784] ? cap_capable+0xdb/0x3b0 [ 1094.849803] ? __pfx_v9fs_mount+0x10/0x10 [ 1094.849817] legacy_get_tree+0x109/0x220 [ 1094.849832] vfs_get_tree+0x93/0x340 [ 1094.849845] path_mount+0x720/0x2120 [ 1094.849861] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1094.849874] ? __pfx_path_mount+0x10/0x10 [ 1094.849890] ? putname.part.0+0x11b/0x160 [ 1094.849907] ? getname_flags.part.0+0x1c6/0x540 [ 1094.849920] ? putname.part.0+0x11b/0x160 [ 1094.849939] __x64_sys_mount+0x293/0x310 [ 1094.849954] ? __pfx___x64_sys_mount+0x10/0x10 [ 1094.849974] do_syscall_64+0xbf/0x390 [ 1094.849990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.850002] RIP: 0033:0x7f71d000eb19 [ 1094.850012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1094.850023] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1094.850034] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1094.850042] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1094.850049] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1094.850057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1094.850063] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1094.850083] [ 1094.884005] EXT4-fs: Mount option(s) incompatible with ext2 [ 1094.901668] loop4: detected capacity change from 0 to 4 03:59:55 executing program 7: ioperm(0x3, 0x7, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 1094.920201] EXT4-fs: Mount option(s) incompatible with ext2 03:59:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xb00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1094.994500] No source specified [ 1094.999552] No source specified 03:59:55 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000001640)='ocfs2\x00', 0x1) close_range(r0, r1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000000c0)="e0dd836edfeb55fe58622d26ef7ae43b7da373506af99210373f8fcb4e1bd1bbe8ae86b80e", 0x25}, {&(0x7f0000000100)="86f76389ed03028ae7e2ffbdc725e77af5d90d4a6f9f720b601f2e0efaad483bb322d7cf57eb658f54d14d0073bc4fd9a6e891a736908585a47dc363cff4ddaad63ca7364c166dcc73027b43497458fcf7efe9e37b4d972d7e88fea682f55e79a386744aef9a7daaeb9760e7b964fa05702837846bb707aa65c1099acebe6ce04b436383cf4efccee3c3981147179a7b3830a84b2c232b0588474377720a8810e6daa42e250e2007e2f4d0be4e35dd27270d261afa095d3a7ed6436ebda69e31e7d1fdb4285beddd3cadb3dd4e56", 0xce}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="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", 0xfb}, {&(0x7f0000001380)="6c741fc99410ad98f758e6e9a54fc0b90dcbe116df9ac516d8a353ccc5ca3242845e885379cdc612ad501249570ef0d65854bb4f7c03d7f3e712a89c3313949540704ee0a65375e5fa5aae98b485b8d9a30a63e3b16412568636a026d80657d61e196588ef0f4ceb2533246a30c4ca207c2d426e35b899ced59332d452aeebbe35ab16fb8d204746d8eaeb2ba8e03e5aa28a82627e8db23a655ee3a815b480ac", 0xa0}, {&(0x7f0000001440)="d11c4ab6", 0x4}, {&(0x7f0000001480)="1e2645cfa9bdb0bf3b8c9074fff68f0dd574259db26f191ea8ba6949ea80eaf93e071c15e0dda80ba06ebbd60f4a2e288c9f8a333afb574119e4f5f272913c8975", 0x41}, {&(0x7f0000001500)="5887781c6560c203e184ed376dc0fa6b", 0x10}, {&(0x7f0000001540)="1daa479032451997238485", 0xb}], 0x9, 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r2, &(0x7f0000000240)=""/34, 0x22) fremovexattr(r2, &(0x7f0000000080)=@known='trusted.overlay.origin\x00') [ 1095.042518] loop4: detected capacity change from 0 to 5 [ 1095.055377] EXT4-fs: Mount option(s) incompatible with ext2 [ 1095.065593] loop4: detected capacity change from 0 to 5 [ 1095.073055] EXT4-fs: Mount option(s) incompatible with ext2 03:59:55 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650", 0x2f) 03:59:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 25) 04:00:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:05 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:00:05 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650", 0x2f) 04:00:05 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="f69802ddac9d3e5f167c1d23028ad3258a4faaa2f347ac21ab21d6041dbb4f1b8171ddb6eac04630486e3c3b545f6b2efec3e0e06528c3aa160a9a3fe38bd741077772628e92e123fd9dc47262d5402aa39b94de69a78ac950490c43d6c95ad530d30054001637e1d589", 0x6a}, {&(0x7f0000000340)="c2666bec9deeb95e39de8ffe5285f024900d48f160f2bda5bd4af72778f5d0d602f917b89ebec91c76448f039454f200cfb9407ac3ebb016f66ca5bef960779017bb67351fc2296bca46373c8de25f37c1626474b1c0630110a81f227134e801ac5930abe39e4581d5f6400665dedc09097af24c74592ffaab863f4eb7de10a0611a", 0x82}], 0x2, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='rfdno') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write(r3, &(0x7f0000000240)="ec", 0x1) 04:00:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x1800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:00:05 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x2) ioctl$VT_DISALLOCATE(r2, 0x5608) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1d00) setresuid(0x0, r3, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x560f, 0x0) 04:00:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 26) 04:00:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0x3, 0x7f, 0x80, 0x0, 0x3, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x800, 0x0, 0xffff9ac4, 0xd, 0x6, 0x10000, 0x80, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xc, r1, 0x2) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r2, &(0x7f0000000240)=""/34, 0x22) [ 1104.825864] loop4: detected capacity change from 0 to 12 [ 1104.830402] EXT4-fs: Mount option(s) incompatible with ext2 [ 1104.835690] loop4: detected capacity change from 0 to 12 [ 1104.837703] EXT4-fs: Mount option(s) incompatible with ext2 [ 1104.844858] No source specified [ 1104.849780] No source specified [ 1104.890926] FAULT_INJECTION: forcing a failure. [ 1104.890926] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.892906] CPU: 0 UID: 0 PID: 8882 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1104.892940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1104.892953] Call Trace: [ 1104.892961] [ 1104.892970] dump_stack_lvl+0xfa/0x120 [ 1104.893008] should_fail_ex+0x4d7/0x5e0 [ 1104.893051] should_failslab+0xc2/0x120 [ 1104.893093] __kmalloc_node_track_caller_noprof+0xc1/0x760 [ 1104.893128] ? parse_opts.part.0+0x8d/0x340 [ 1104.893162] ? kstrdup+0x3e/0xc0 [ 1104.893186] kstrdup+0x3e/0xc0 [ 1104.893209] parse_opts.part.0+0x8d/0x340 [ 1104.893237] ? perf_trace_preemptirq_template+0x259/0x430 [ 1104.893264] ? __pfx_parse_opts.part.0+0x10/0x10 [ 1104.893291] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1104.893317] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1104.893342] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1104.893383] p9_fd_create+0x9b/0x530 [ 1104.893412] ? __pfx_p9_fd_create+0x10/0x10 [ 1104.893439] ? irq_entries_start+0x4/0xcb0 [ 1104.893464] ? p9_client_create+0x78a/0x11d0 [ 1104.893506] p9_client_create+0x7f1/0x11d0 [ 1104.893550] ? __pfx_p9_client_create+0x10/0x10 [ 1104.893586] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1104.893612] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1104.893641] ? kasan_save_track+0x14/0x30 [ 1104.893675] ? __kasan_kmalloc+0x7f/0x90 [ 1104.893710] ? trace_kmalloc+0x1f/0xb0 [ 1104.893741] ? __kmalloc_node_track_caller_noprof+0x2ce/0x760 [ 1104.893772] ? kasan_save_track+0x14/0x30 [ 1104.893807] ? v9fs_session_init+0xeb/0x17a0 [ 1104.893834] ? lockdep_init_map_type+0x4b/0x240 [ 1104.893866] ? __raw_spin_lock_init+0x3a/0x110 [ 1104.893904] v9fs_session_init+0x1df/0x17a0 [ 1104.893930] ? do_raw_spin_lock+0x123/0x260 [ 1104.893965] ? find_held_lock+0x2b/0x80 [ 1104.894001] ? __create_object+0x59/0x80 [ 1104.894042] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1104.894068] ? __pfx_v9fs_session_init+0x10/0x10 [ 1104.894094] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1104.894120] ? __create_object+0x59/0x80 [ 1104.894160] ? trace_kmalloc+0x1f/0xb0 [ 1104.894190] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1104.894215] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1104.894263] v9fs_mount+0xbc/0x9e0 [ 1104.894296] ? __pfx_v9fs_mount+0x10/0x10 [ 1104.894329] ? cap_capable+0xdb/0x3b0 [ 1104.894368] ? __pfx_v9fs_mount+0x10/0x10 [ 1104.894399] legacy_get_tree+0x109/0x220 [ 1104.894430] vfs_get_tree+0x93/0x340 [ 1104.894455] path_mount+0x720/0x2120 [ 1104.894488] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1104.894516] ? __pfx_path_mount+0x10/0x10 [ 1104.894550] ? putname.part.0+0x11b/0x160 [ 1104.894587] ? getname_flags.part.0+0x1c6/0x540 [ 1104.894613] ? putname.part.0+0x11b/0x160 [ 1104.894654] __x64_sys_mount+0x293/0x310 [ 1104.894687] ? __pfx___x64_sys_mount+0x10/0x10 [ 1104.894729] do_syscall_64+0xbf/0x390 [ 1104.894762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.894786] RIP: 0033:0x7f71d000eb19 [ 1104.894805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1104.894829] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1104.894853] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1104.894870] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1104.894885] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1104.894900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1104.894915] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1104.894947] [ 1104.936597] loop4: detected capacity change from 0 to 14 04:00:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x1c00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:00:05 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000006c00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001540)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) 04:00:05 executing program 7: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42400, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r1, &(0x7f0000000240)=""/34, 0x22) readahead(r0, 0xcc, 0xe3) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000000c0)) r2 = pidfd_open(0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000000)={{0x0, 0x9, 0x4, 0x66e, 0x240000000000, 0x4, 0x1, 0xd9, 0x9, 0x0, 0x401, 0x0, 0x5, 0x9, 0x7}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000180)={{r5, 0xfff, 0x400, 0x0, 0xc3c, 0x41, 0x1, 0x8000, 0xfffff800, 0x8, 0x1, 0x7fff, 0x0, 0x0, 0x80}, 0x8, [0x0]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) [ 1104.978249] EXT4-fs: Mount option(s) incompatible with ext2 04:00:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:05 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000100)=0x4) 04:00:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x2000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1105.094741] loop4: detected capacity change from 0 to 16 [ 1105.102013] EXT4-fs: Mount option(s) incompatible with ext2 [ 1105.118428] loop4: detected capacity change from 0 to 16 [ 1105.132436] EXT4-fs: Mount option(s) incompatible with ext2 [ 1105.158833] No source specified [ 1105.179854] No source specified 04:00:16 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:00:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:16 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 27) 04:00:16 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffec6, 0xea, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x87, 0x7, 0x3, 0x1, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x40, 0x6, 0x8, 0x3, 0x10001, 0x0, 0x5, 0x0, 0x5, 0x0, 0xf78}, r1, 0x3, 0xffffffffffffffff, 0x1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x31) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000280)={0x0, 0x9, 0x749c, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000680)={r4, 0xfffffffffffffffd, 0x1, [0x101, 0x80, 0xfffffffffffffffd, 0x200, 0x9], [0x1f, 0x4f3a, 0x0, 0x8, 0x2, 0x3ff, 0x3f, 0x9, 0x4, 0x0, 0x0, 0x5a53, 0xffffffffffffff81, 0x3fbf0c15, 0x1, 0x200, 0x2, 0x7f, 0x6, 0x3ff, 0xffff, 0x6, 0x800, 0x8, 0x8, 0xfffffffffffffffd, 0x9, 0xb94, 0x0, 0xff, 0x40, 0x3f, 0x644, 0x44, 0x9, 0x101, 0x3f, 0xfffffffffffffffd, 0x7ff, 0xffff, 0x7, 0x2, 0x1, 0x0, 0xfffffffffffffffc, 0x10001, 0x3f, 0x1, 0x0, 0x80000001, 0x1ff, 0x0, 0xa2, 0x6, 0x7, 0xfffffffffffffe01, 0x5, 0x6, 0xe98, 0x1, 0x5, 0xfffffffffffffff8, 0x7, 0x0, 0x7c, 0x8001, 0x40, 0xfffffffffffffffe, 0x7ff, 0x8, 0x10001, 0x1, 0x700, 0x7f180ce9, 0x694906d2, 0x40, 0x5, 0x8, 0x3, 0x80, 0x3, 0x7, 0x4, 0x80, 0xff, 0x9, 0x20, 0x7, 0x4, 0x200, 0x0, 0x81, 0x7, 0x7, 0x4, 0x6, 0xb3f, 0x1, 0x8, 0x5, 0x6f, 0xd0, 0x23df, 0x81, 0x2, 0x5, 0x3, 0xd8fe, 0xffffffffffffffc1, 0xb, 0x4, 0x1, 0x40, 0x1, 0xe55, 0x3ff, 0x4, 0x5, 0x3520, 0x0, 0xfffffffffffffffc]}) r5 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r5, &(0x7f0000000240)=""/34, 0x22) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 04:00:16 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650", 0x2f) 04:00:16 executing program 6: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioprio_set$pid(0x1, 0x0, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="a0", 0x1}], 0x1, 0x0, 0x0, 0x0) 04:00:16 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdfo=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write(r1, &(0x7f0000000240)="ec", 0x1) 04:00:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x4000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1115.998852] No source specified [ 1115.999760] No source specified 04:00:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x300, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 1116.067990] No source specified [ 1116.073017] No source specified [ 1116.076350] loop4: detected capacity change from 0 to 32 [ 1116.078509] 9pnet_fd: Insufficient options for proto=fd [ 1116.095238] EXT4-fs: Mount option(s) incompatible with ext2 [ 1116.102531] 9pnet_fd: Insufficient options for proto=fd 04:00:16 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/224, 0xe0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) r3 = socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x3, &(0x7f0000000480)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8c1, 0xffffffffffffffff, &(0x7f0000000100)="82694bfb6a22c685ddde74140e1e54395174858317898f84b4d320e3046de5ee82e7b2423705649e7e1f70538355bfae8c7cdff2f2f36b449456f839291d5ad5a0545f4b36f53a793d9a6e30ce890484b43d5a6c35eae5a2e6a39d16f938bb056b1ec86436ba2d3210b10ab183fffd193a05a31e147582f824dfa274b4d184dcaf00bc9c6c56", 0x86}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000400)="2afd830d1b428a5c3faf1f6aca0f7d1f2ccb41c0dc0e65af", 0x18, 0x0, 0x0, 0x0, r0}]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}]}}) r6 = openat2(r2, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x3e1000, 0x4, 0x14}, 0x18) io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="cb3ea628c15c80db0807480c77f9e0732fb2403eafdb612d36be0298a6ee3df847c306894dfb5158e535362444017d71e8cf3caed183ff64a2fbd94bf400102c1a683d416222fedb3d8412703d09df0e4e28f0fa2900a76f05cc7e01b8c0c6d65d4d26ed3c36e960aabd22d9c0b939e1260ef7134bbbda51cdaaf02a78bcf22ba53de2ca55a15add6dbbcb7856ef5347c43183081c02bf3d017b42ebe5118432c5cd91cf0f13b24c7517", 0xaa, 0x40, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x7, r5, &(0x7f0000000340)="af82ea2cae70c668c2896f7307706fa83204def2fb9c7c", 0x17, 0x9, 0x0, 0x2, r6}]) 04:00:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x500, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 1116.123794] loop4: detected capacity change from 0 to 32 [ 1116.137962] EXT4-fs: Mount option(s) incompatible with ext2 [ 1116.185223] No source specified 04:00:16 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="747232843435a8afac97fc39b7ccbcfd46616e733d66642c7266646e6f3da88255b7f730158e461aa267f0d0f467609024feffaaaab7276858e4b889c82219", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c10"]) write(r1, &(0x7f0000000240)="ec", 0x1) [ 1116.187145] No source specified 04:00:16 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2", 0x47) 04:00:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) read(r1, &(0x7f00000000c0)=""/169, 0xa9) 04:00:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x600, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x6600, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1116.290853] No source specified [ 1116.297407] No source specified [ 1116.379575] loop4: detected capacity change from 0 to 51 [ 1116.393432] EXT4-fs: Mount option(s) incompatible with ext2 [ 1116.409025] loop4: detected capacity change from 0 to 51 [ 1116.427636] EXT4-fs: Mount option(s) incompatible with ext2 [ 1126.049211] Bluetooth: hci6: command 0x0406 tx timeout 04:00:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 28) 04:00:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x700, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:26 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r1, &(0x7f0000000240)=""/34, 0x22) close(r0) 04:00:26 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2", 0x47) 04:00:26 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/224, 0xe0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) r3 = socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x3, &(0x7f0000000480)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8c1, 0xffffffffffffffff, &(0x7f0000000100)="82694bfb6a22c685ddde74140e1e54395174858317898f84b4d320e3046de5ee82e7b2423705649e7e1f70538355bfae8c7cdff2f2f36b449456f839291d5ad5a0545f4b36f53a793d9a6e30ce890484b43d5a6c35eae5a2e6a39d16f938bb056b1ec86436ba2d3210b10ab183fffd193a05a31e147582f824dfa274b4d184dcaf00bc9c6c56", 0x86}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000400)="2afd830d1b428a5c3faf1f6aca0f7d1f2ccb41c0dc0e65af", 0x18, 0x0, 0x0, 0x0, r0}]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}]}}) r6 = openat2(r2, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x3e1000, 0x4, 0x14}, 0x18) io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="cb3ea628c15c80db0807480c77f9e0732fb2403eafdb612d36be0298a6ee3df847c306894dfb5158e535362444017d71e8cf3caed183ff64a2fbd94bf400102c1a683d416222fedb3d8412703d09df0e4e28f0fa2900a76f05cc7e01b8c0c6d65d4d26ed3c36e960aabd22d9c0b939e1260ef7134bbbda51cdaaf02a78bcf22ba53de2ca55a15add6dbbcb7856ef5347c43183081c02bf3d017b42ebe5118432c5cd91cf0f13b24c7517", 0xaa, 0x40, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x7, r5, &(0x7f0000000340)="af82ea2cae70c668c2896f7307706fa83204def2fb9c7c", 0x17, 0x9, 0x0, 0x2, r6}]) 04:00:26 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:00:26 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write(r2, &(0x7f0000000240)="ec", 0x1) 04:00:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x8004, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1126.362171] loop4: detected capacity change from 0 to 64 [ 1126.364866] EXT4-fs: Mount option(s) incompatible with ext2 [ 1126.370035] loop4: detected capacity change from 0 to 64 [ 1126.371807] EXT4-fs: Mount option(s) incompatible with ext2 04:00:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xbe00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1126.412330] loop4: detected capacity change from 0 to 95 [ 1126.417492] EXT4-fs: Mount option(s) incompatible with ext2 [ 1126.426483] FAULT_INJECTION: forcing a failure. [ 1126.426483] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.427384] CPU: 1 UID: 0 PID: 8973 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1126.427400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.427408] Call Trace: [ 1126.427412] [ 1126.427417] dump_stack_lvl+0xfa/0x120 [ 1126.427438] should_fail_ex+0x4d7/0x5e0 [ 1126.427460] should_failslab+0xc2/0x120 [ 1126.427482] __kmalloc_cache_noprof+0x73/0x6a0 [ 1126.427495] ? p9_fd_create+0x17e/0x530 [ 1126.427512] ? p9_fd_create+0x17e/0x530 [ 1126.427524] p9_fd_create+0x17e/0x530 [ 1126.427537] ? __pfx_p9_fd_create+0x10/0x10 [ 1126.427550] ? irq_entries_start+0x4/0xcb0 [ 1126.427562] ? p9_client_create+0x78a/0x11d0 [ 1126.427583] p9_client_create+0x7f1/0x11d0 [ 1126.427604] ? __pfx_p9_client_create+0x10/0x10 [ 1126.427620] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1126.427633] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1126.427649] ? kasan_save_track+0x14/0x30 [ 1126.427665] ? __kasan_kmalloc+0x7f/0x90 [ 1126.427681] ? trace_kmalloc+0x1f/0xb0 [ 1126.427696] ? __kmalloc_node_track_caller_noprof+0x2ce/0x760 [ 1126.427710] ? kasan_save_track+0x14/0x30 [ 1126.427726] ? v9fs_session_init+0xeb/0x17a0 [ 1126.427740] ? lockdep_init_map_type+0x4b/0x240 [ 1126.427755] ? __raw_spin_lock_init+0x3a/0x110 [ 1126.427773] v9fs_session_init+0x1df/0x17a0 [ 1126.427785] ? do_raw_spin_lock+0x123/0x260 [ 1126.427801] ? find_held_lock+0x2b/0x80 [ 1126.427819] ? __create_object+0x59/0x80 [ 1126.427839] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1126.427851] ? __pfx_v9fs_session_init+0x10/0x10 [ 1126.427863] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1126.427875] ? __create_object+0x59/0x80 [ 1126.427893] ? trace_kmalloc+0x1f/0xb0 [ 1126.427908] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1126.427925] v9fs_mount+0xbc/0x9e0 [ 1126.427941] ? __pfx_v9fs_mount+0x10/0x10 [ 1126.427956] ? cap_capable+0xdb/0x3b0 [ 1126.427975] ? __pfx_v9fs_mount+0x10/0x10 [ 1126.427989] legacy_get_tree+0x109/0x220 [ 1126.428005] vfs_get_tree+0x93/0x340 [ 1126.428017] path_mount+0x720/0x2120 [ 1126.428033] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1126.428046] ? __pfx_path_mount+0x10/0x10 [ 1126.428062] ? putname.part.0+0x11b/0x160 [ 1126.428080] ? getname_flags.part.0+0x1c6/0x540 [ 1126.428092] ? putname.part.0+0x11b/0x160 [ 1126.428112] __x64_sys_mount+0x293/0x310 [ 1126.428127] ? __pfx___x64_sys_mount+0x10/0x10 [ 1126.428146] do_syscall_64+0xbf/0x390 [ 1126.428163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.428174] RIP: 0033:0x7f71d000eb19 [ 1126.428183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.428195] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1126.428206] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1126.428215] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1126.428222] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1126.428229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.428236] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1126.428251] [ 1126.470675] No source specified [ 1126.482487] No source specified 04:00:26 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r1, &(0x7f0000000240)=""/34, 0x22) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/block', 0x40000, 0xe8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}]}}) close_range(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) 04:00:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xbf00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:00:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 29) [ 1126.574699] loop4: detected capacity change from 0 to 95 [ 1126.587101] EXT4-fs: Mount option(s) incompatible with ext2 [ 1126.603504] loop4: detected capacity change from 0 to 95 [ 1126.609581] EXT4-fs: Mount option(s) incompatible with ext2 04:00:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x8ef, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:26 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r1, &(0x7f0000000240)=""/34, 0x22) r2 = getpid() pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x71, 0xc0, 0x7f, 0x0, 0x40, 0x85000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7ff, 0xaf1}, 0xc569, 0xfffffffffffffff7, 0x2, 0x2, 0x554, 0x4, 0x5, 0x0, 0x81de, 0x0, 0x8}, r2, 0xe, r1, 0x0) r4 = accept4$unix(r1, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x88) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}]}}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002700)=0x0) sendmsg$unix(r4, &(0x7f00000027c0)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002680)=[{&(0x7f0000000300)="22b49c003e0fc82a6845a4ffa9574059cedaf8ce873361547f97247ba0a07ed7ee81c91bb0970e6a445175bbebc40abe016761725e64d167dfdb47374b639424a417ed2c4fdbb3021b6b6d4e4002244c39f32884dfeb1aa4c484f985cbc6bc2fd0ce1272e74dbe731e2f825235d483cd580b949a48a0cce997ffe0db3403ce0c7e93d66fc3658653cc43b08789d8792567c7b4a75e9a9d44991c0f16db3220a06becc601a97f3ca34b5a4ef945725f1efadd", 0xb2}, {&(0x7f00000001c0)}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="4f5d5c2d683b58f88ad44af82dd2b03b3437287ddd46c12af15996eba95e39d745f5fed89ba5ff6b341886674f8b267d1f2b741eb4153cbeaded18ffdbf5d420aea9ecedb80958ec0f98f5d8d3dc66d93ec7414e8c695619287c02eb18257aebe0a799d1f2f3af7130362f4448700dea265a46f560a9ee3fe359a9c103937b048f958d1434727152dafbba34c0a5769bac2607e5913eb90b7698f746c161c9470f84e0e2c843078c", 0xa8}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="d96276eb716c2de1b38cc20dd7f355cc1767a58c434798418df2d4b480de6cc0e5afb36c12923c85449fd71eb9a74478d016133cbea5ac5f96b7ba830bf21b91588c71c43dd1fe163ac8c9e76cd2c3c32edd28e984a4da24a9659f94c18ac3628cd944744b28ce377a4908841f69d62c77b0c5ae22ecbe11df74bff59fcb70deb6c16f796f18a56745fa25c42bfb97e609a006fb1a3f0b37ebbac3d15accf4eb365def84367c7f47c8a1034201239b6d61445f2e454cc634", 0xb8}, {&(0x7f0000002540)="6b6116a51f6d31a124c60233ca71a4023329a8b2806f6be895afd27ca2b9ae6ae6f7ecdab49bd1a930303e4afa5d56e460a2e005130f90222b333a1410e8ca8398e240fe64771e4a66aa7a69b2b2663eb907b13825b35b8caf1cba8da892721383ef8c8c7890afde99eb784da176985be8045eba1d6fb9a521f5f6874a747fdc04fe85407820f6be84bbf9d64bca5b75213956267fd1ca42a421cf7781f9b7c01599c0b71a4f1383da03213093e626746fad949bc18a15ffe618c5f94eebae86221e959981ecc3b947f0c523562b3ca54a4f63f85e0374352536954fef28638109bc584d23abcecd7a2fca4e1bfad5b83e2d", 0xf2}, {&(0x7f0000002640)="ca7a49a45f4267b8bc962a4c0c92", 0xe}], 0x8, &(0x7f0000002740)=[@rights={{0x24, 0x1, 0x1, [r1, r5, r3, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x60, 0x8010}, 0x40000) 04:00:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xf000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:00:26 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb", 0x30) 04:00:26 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/224, 0xe0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) r3 = socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x3, &(0x7f0000000480)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8c1, 0xffffffffffffffff, &(0x7f0000000100)="82694bfb6a22c685ddde74140e1e54395174858317898f84b4d320e3046de5ee82e7b2423705649e7e1f70538355bfae8c7cdff2f2f36b449456f839291d5ad5a0545f4b36f53a793d9a6e30ce890484b43d5a6c35eae5a2e6a39d16f938bb056b1ec86436ba2d3210b10ab183fffd193a05a31e147582f824dfa274b4d184dcaf00bc9c6c56", 0x86}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000400)="2afd830d1b428a5c3faf1f6aca0f7d1f2ccb41c0dc0e65af", 0x18, 0x0, 0x0, 0x0, r0}]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}]}}) r6 = openat2(r2, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x3e1000, 0x4, 0x14}, 0x18) io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="cb3ea628c15c80db0807480c77f9e0732fb2403eafdb612d36be0298a6ee3df847c306894dfb5158e535362444017d71e8cf3caed183ff64a2fbd94bf400102c1a683d416222fedb3d8412703d09df0e4e28f0fa2900a76f05cc7e01b8c0c6d65d4d26ed3c36e960aabd22d9c0b939e1260ef7134bbbda51cdaaf02a78bcf22ba53de2ca55a15add6dbbcb7856ef5347c43183081c02bf3d017b42ebe5118432c5cd91cf0f13b24c7517", 0xaa, 0x40, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x7, r5, &(0x7f0000000340)="af82ea2cae70c668c2896f7307706fa83204def2fb9c7c", 0x17, 0x9, 0x0, 0x2, r6}]) 04:00:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 30) [ 1126.725770] loop4: detected capacity change from 0 to 120 04:00:26 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write(r2, &(0x7f0000000240)="ec", 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6e6f51657874656e662c004dea0fc3b78fb17af7dbc70174254cb7605cebc6011f42b545fc4b0f907eef80bc79a3e3802d5180daee866cdaedf06138b581386a775a8cb355d443937de0488cd8f496f22d66b6561d4536227f0f1383c741eecbeb532137a718104438383fcdcb0c3c530984482835ffa53e3adb991e8fdc779b74f8fd160ff77ca5f5b58bd1334d205d23778c882b315d5f9f6fadabd1cca9de1bc4bee18246"]) fcntl$setstatus(r3, 0x4, 0x2000) r5 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000340)={{0x0, 0x1, 0x1000, 0x8, 0xf4, 0x0, 0x887, 0x800, 0x3ff, 0x1, 0x80000000, 0x5, 0x7f}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000400)={{r6, 0x0, 0x0, 0xf97f, 0x14116476, 0x0, 0x9, 0x0, 0x8, 0x4, 0x8, 0xa80f, 0x4, 0x0, 0x7ff}}) [ 1126.742342] EXT4-fs: Mount option(s) incompatible with ext2 [ 1126.751607] loop4: detected capacity change from 0 to 120 [ 1126.761713] EXT4-fs: Mount option(s) incompatible with ext2 [ 1126.773668] FAULT_INJECTION: forcing a failure. [ 1126.773668] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.774806] CPU: 1 UID: 0 PID: 9007 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1126.774822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.774829] Call Trace: [ 1126.774833] [ 1126.774837] dump_stack_lvl+0xfa/0x120 [ 1126.774859] should_fail_ex+0x4d7/0x5e0 [ 1126.774880] ? p9_tag_alloc+0x9b/0x820 [ 1126.774897] should_failslab+0xc2/0x120 [ 1126.774914] kmem_cache_alloc_noprof+0x72/0x680 [ 1126.774931] ? p9_tag_alloc+0x9b/0x820 [ 1126.774946] p9_tag_alloc+0x9b/0x820 [ 1126.774964] ? __pfx_p9_tag_alloc+0x10/0x10 [ 1126.774981] ? p9_fd_create+0x17e/0x530 [ 1126.774993] ? p9_client_create+0x7f1/0x11d0 [ 1126.775009] ? v9fs_session_init+0x1df/0x17a0 [ 1126.775026] p9_client_prepare_req+0x17f/0x460 [ 1126.775044] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1126.775063] ? p9_pollwait+0x1ab/0x210 [ 1126.775080] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1126.775095] p9_client_rpc+0x1a0/0xba0 [ 1126.775114] ? __pfx_p9_client_rpc+0x10/0x10 [ 1126.775130] ? __pfx_p9_pollwait+0x10/0x10 [ 1126.775141] ? __pfx_pipe_poll+0x10/0x10 [ 1126.775157] ? p9_fd_poll+0x1e0/0x2c0 [ 1126.775172] ? p9_fd_create+0x34e/0x530 [ 1126.775185] ? __pfx_p9_fd_create+0x10/0x10 [ 1126.775199] ? p9_client_create+0x78a/0x11d0 [ 1126.775218] p9_client_create+0xbd7/0x11d0 [ 1126.775239] ? __pfx_p9_client_create+0x10/0x10 [ 1126.775255] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1126.775267] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1126.775282] ? kasan_save_track+0x14/0x30 [ 1126.775298] ? __kasan_kmalloc+0x7f/0x90 [ 1126.775314] ? trace_kmalloc+0x1f/0xb0 [ 1126.775329] ? __kmalloc_node_track_caller_noprof+0x2ce/0x760 [ 1126.775343] ? kasan_save_track+0x14/0x30 [ 1126.775359] ? v9fs_session_init+0xeb/0x17a0 [ 1126.775371] ? lockdep_init_map_type+0x4b/0x240 [ 1126.775388] ? __raw_spin_lock_init+0x3a/0x110 [ 1126.775406] v9fs_session_init+0x1df/0x17a0 [ 1126.775418] ? do_raw_spin_lock+0x123/0x260 [ 1126.775434] ? find_held_lock+0x2b/0x80 [ 1126.775451] ? __create_object+0x59/0x80 [ 1126.775471] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1126.775483] ? __pfx_v9fs_session_init+0x10/0x10 [ 1126.775496] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1126.775507] ? __create_object+0x59/0x80 [ 1126.775526] ? trace_kmalloc+0x1f/0xb0 [ 1126.775540] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1126.775552] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1126.775575] v9fs_mount+0xbc/0x9e0 [ 1126.775591] ? __pfx_v9fs_mount+0x10/0x10 [ 1126.775606] ? cap_capable+0xdb/0x3b0 [ 1126.775625] ? __pfx_v9fs_mount+0x10/0x10 [ 1126.775639] legacy_get_tree+0x109/0x220 [ 1126.775654] vfs_get_tree+0x93/0x340 [ 1126.775667] path_mount+0x720/0x2120 [ 1126.775683] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1126.775696] ? __pfx_path_mount+0x10/0x10 [ 1126.775712] ? putname.part.0+0x11b/0x160 [ 1126.775729] ? getname_flags.part.0+0x1c6/0x540 [ 1126.775741] ? putname.part.0+0x11b/0x160 [ 1126.775761] __x64_sys_mount+0x293/0x310 [ 1126.775776] ? __pfx___x64_sys_mount+0x10/0x10 [ 1126.775795] do_syscall_64+0xbf/0x390 [ 1126.775812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.775824] RIP: 0033:0x7f71d000eb19 [ 1126.775833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.775845] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1126.775857] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1126.775865] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1126.775872] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1126.775879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.775886] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1126.775901] 04:00:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) r1 = getpid() pidfd_open(r1, 0x0) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x4, 0x1, 0x2, 0xff, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x3, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x6, 0x1, 0x3, 0x2, 0x80, 0x9, 0x0, 0x7f, 0x0, 0x7}, r1, 0x7, r2, 0x2) r3 = dup2(r0, r0) readv(r3, &(0x7f0000000940)=[{&(0x7f0000000240)=""/249, 0xf9}], 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}]}}) mq_notify(r5, &(0x7f0000000340)={0x0, 0x26, 0x1, @thr={&(0x7f0000000140)="2ae095b32533d87fb6e3be0c6400a80b889dc8766a1760b23eb8ca56d2d28921de821e2a44af8375cf7ccaabf4103e2ab97d358a3c4b096530666b1291731cbb45fea0f6f4518b95d5beeff75dfb5db59b45bd186f1136c3a321b8102384a40998dd95017684b88fd3c4e35c", &(0x7f0000000980)="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"}}) r6 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r6, &(0x7f0000000240)=""/34, 0x22) 04:00:37 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:00:37 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@version_9p2000}, {@aname={'aname', 0x3d, '\x00'}}, {@dfltgid={'dfltgid', 0x3d, r4}}]}}) write(r2, &(0x7f0000000240)="ec", 0x1) r5 = fork() kcmp(r3, r5, 0xec4255d21983561d, r2, r2) 04:00:37 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb", 0x30) 04:00:37 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 31) 04:00:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xf500, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:00:37 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/224, 0xe0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) r3 = socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x3, &(0x7f0000000480)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8c1, 0xffffffffffffffff, &(0x7f0000000100)="82694bfb6a22c685ddde74140e1e54395174858317898f84b4d320e3046de5ee82e7b2423705649e7e1f70538355bfae8c7cdff2f2f36b449456f839291d5ad5a0545f4b36f53a793d9a6e30ce890484b43d5a6c35eae5a2e6a39d16f938bb056b1ec86436ba2d3210b10ab183fffd193a05a31e147582f824dfa274b4d184dcaf00bc9c6c56", 0x86}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000400)="2afd830d1b428a5c3faf1f6aca0f7d1f2ccb41c0dc0e65af", 0x18, 0x0, 0x0, 0x0, r0}]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}]}}) r6 = openat2(r2, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x3e1000, 0x4, 0x14}, 0x18) io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="cb3ea628c15c80db0807480c77f9e0732fb2403eafdb612d36be0298a6ee3df847c306894dfb5158e535362444017d71e8cf3caed183ff64a2fbd94bf400102c1a683d416222fedb3d8412703d09df0e4e28f0fa2900a76f05cc7e01b8c0c6d65d4d26ed3c36e960aabd22d9c0b939e1260ef7134bbbda51cdaaf02a78bcf22ba53de2ca55a15add6dbbcb7856ef5347c43183081c02bf3d017b42ebe5118432c5cd91cf0f13b24c7517", 0xaa, 0x40, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x7, r5, &(0x7f0000000340)="af82ea2cae70c668c2896f7307706fa83204def2fb9c7c", 0x17, 0x9, 0x0, 0x2, r6}]) [ 1137.496748] loop4: detected capacity change from 0 to 122 [ 1137.501967] EXT4-fs: Mount option(s) incompatible with ext2 [ 1137.508802] loop4: detected capacity change from 0 to 122 [ 1137.511176] EXT4-fs: Mount option(s) incompatible with ext2 04:00:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xfeff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:00:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0xab, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 1137.713722] loop4: detected capacity change from 0 to 127 [ 1137.733739] EXT4-fs: Mount option(s) incompatible with ext2 [ 1137.765873] loop4: detected capacity change from 0 to 127 [ 1137.777792] EXT4-fs: Mount option(s) incompatible with ext2 04:00:47 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 32) 04:00:47 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:00:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xff01, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:00:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x2010, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000080)) read(r1, &(0x7f00000000c0)=""/33, 0x21) read(r0, &(0x7f0000000240)=""/34, 0x22) 04:00:47 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2", 0x47) 04:00:47 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb", 0x30) 04:00:47 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000380)={0x4, 0x80, 0x10, 0x3f, 0x1, 0x7, 0x0, 0x2, 0x4005, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe, 0x4, @perf_bp={&(0x7f0000000280), 0x3}, 0x804, 0x5, 0x8, 0x1, 0x18, 0x3f, 0xb3, 0x0, 0x80000001, 0x0, 0x10001}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r5]) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000180)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@cache_fscache}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, 'trans=fd,'}}, {@noextend}, {@cache_loose}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x63, 0x37, 0x32, 0x31, 0x30, 0x66, 0x34], 0x2d, [0x65, 0x65, 0x38, 0x34], 0x2d, [0x36, 0x39, 0x63, 0x66], 0x2d, [0x31, 0x36, 0x33, 0x64], 0x2d, [0x32, 0x66, 0x0, 0x3, 0x66, 0x65, 0x62, 0x35]}}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) [ 1147.826882] loop4: detected capacity change from 0 to 127 [ 1147.839047] EXT4-fs: Mount option(s) incompatible with ext2 04:00:48 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 1147.853916] FAULT_INJECTION: forcing a failure. [ 1147.853916] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.855595] CPU: 0 UID: 0 PID: 9075 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1147.855626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1147.855640] Call Trace: [ 1147.855648] [ 1147.855656] dump_stack_lvl+0xfa/0x120 [ 1147.855693] should_fail_ex+0x4d7/0x5e0 [ 1147.855734] should_failslab+0xc2/0x120 [ 1147.855768] __kmalloc_noprof+0xc8/0x760 [ 1147.855805] ? __create_object+0x59/0x80 [ 1147.855842] ? p9_fcall_init+0x97/0x290 [ 1147.855879] ? p9_fcall_init+0x97/0x290 [ 1147.855915] p9_fcall_init+0x97/0x290 [ 1147.855949] p9_tag_alloc+0x169/0x820 04:00:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x4, &(0x7f0000000380)=[{&(0x7f0000000100)="ee5e4e139171037afca1b6addc1694a680092d3a115ed8abeee815c5228476129b97d02597f5d3dfb86a", 0x2a, 0x4}, {&(0x7f0000000280)="72e47733fd6df37735d751952d66c8d7ae7b937c96709325854f002657065ea41c5a51076e21a13e0bf233c49902ae73b71a537a1066a1c342b3a2a53e759e4ce17effd980f444cf29d743e072b71f3df49993071a988da3fe7ee0a79e3c50fa2526d59a686a828079d5729c05996a339120f26e4ddbaf277e90b1722fa1705efb7efb5c3b7b955307f478a4b073c5fe0fbd448c000ef1493ba4564a00d5d5e2719be3c610889a09a19bb098b1b3d7a291faf0cc5219b53c93ec978b96da3a7e420d609b7809a16384289f499ea59ac9f7570a640d9713cc7d2d76f3a85d82f1b4a4470ef43c4be11d", 0xe9, 0x3e22fc9c}, {&(0x7f0000000140)="9829dcb2ff3be1980978e1f8fbce27d3e01c439f69185f5f7e65b951b705385c1c0256ec1bfa73a4bb1f534dc6618bf5012d7823ba273823dbb5cc4fc1a608ae0bdc86e3c630775fc3183236fb561202f61df5bd4e02a19ffb23c22dffb9463f0bbb0dfd112fa523d55ee0cd3d02de1dd53f02a8", 0x74, 0x3}, {&(0x7f00000001c0)="e4c3fe4505fc5c106044745fcf7aac2be323c79017463dfc3ef991ffb3eb174cae026b5af9fb1aecbc008d53e721dd915648747aa8f753aab7b7998735bc37", 0x3f}], 0x1200000, &(0x7f0000000400)={[{@uid={'uid', 0x3d, 0xee00}}, {@block}, {@overriderock}, {@sbsector={'sbsector', 0x3d, 0xffffffff}}, {@nocompress}, {@nocompress}, {@hide}, {@map_off}, {@map_normal}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@permit_directio}, {@euid_gt}]}) openat(r1, &(0x7f0000000500)='./file0\x00', 0x8440, 0x2) [ 1147.855985] ? __pfx_p9_tag_alloc+0x10/0x10 [ 1147.856020] ? v9fs_session_init+0x1df/0x17a0 [ 1147.856053] p9_client_prepare_req+0x17f/0x460 [ 1147.856096] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1147.856133] ? p9_pollwait+0x1ab/0x210 [ 1147.856159] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1147.856187] p9_client_rpc+0x1a0/0xba0 [ 1147.856225] ? __pfx_p9_client_rpc+0x10/0x10 [ 1147.856257] ? __pfx_p9_pollwait+0x10/0x10 [ 1147.856280] ? __pfx_pipe_poll+0x10/0x10 [ 1147.856311] ? p9_fd_poll+0x1e0/0x2c0 [ 1147.856340] ? p9_fd_create+0x34e/0x530 [ 1147.856365] ? __pfx_p9_fd_create+0x10/0x10 [ 1147.856393] ? p9_client_create+0x78a/0x11d0 [ 1147.856432] p9_client_create+0xbd7/0x11d0 [ 1147.856473] ? __pfx_p9_client_create+0x10/0x10 [ 1147.856506] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1147.856529] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1147.856558] ? kasan_save_track+0x14/0x30 [ 1147.856590] ? __kasan_kmalloc+0x7f/0x90 [ 1147.856622] ? trace_kmalloc+0x1f/0xb0 [ 1147.856651] ? __kmalloc_node_track_caller_noprof+0x2ce/0x760 [ 1147.856679] ? kasan_save_track+0x14/0x30 [ 1147.856712] ? v9fs_session_init+0xeb/0x17a0 [ 1147.856735] ? lockdep_init_map_type+0x4b/0x240 [ 1147.856766] ? __raw_spin_lock_init+0x3a/0x110 [ 1147.856802] v9fs_session_init+0x1df/0x17a0 [ 1147.856825] ? do_raw_spin_lock+0x123/0x260 [ 1147.856857] ? find_held_lock+0x2b/0x80 [ 1147.856891] ? __create_object+0x59/0x80 [ 1147.856929] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1147.856952] ? __pfx_v9fs_session_init+0x10/0x10 [ 1147.856976] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1147.857000] ? __create_object+0x59/0x80 [ 1147.857037] ? trace_kmalloc+0x1f/0xb0 [ 1147.857080] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1147.857103] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1147.857148] v9fs_mount+0xbc/0x9e0 [ 1147.857178] ? __pfx_v9fs_mount+0x10/0x10 [ 1147.857209] ? cap_capable+0xdb/0x3b0 [ 1147.857245] ? __pfx_v9fs_mount+0x10/0x10 [ 1147.857274] legacy_get_tree+0x109/0x220 [ 1147.857303] vfs_get_tree+0x93/0x340 [ 1147.857326] path_mount+0x720/0x2120 [ 1147.857357] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1147.857383] ? __pfx_path_mount+0x10/0x10 [ 1147.857415] ? putname.part.0+0x11b/0x160 [ 1147.857450] ? getname_flags.part.0+0x1c6/0x540 [ 1147.857474] ? putname.part.0+0x11b/0x160 [ 1147.857512] __x64_sys_mount+0x293/0x310 [ 1147.857543] ? __pfx___x64_sys_mount+0x10/0x10 [ 1147.857581] do_syscall_64+0xbf/0x390 [ 1147.857612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.857635] RIP: 0033:0x7f71d000eb19 [ 1147.857653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.857675] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1147.857697] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1147.857712] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1147.857726] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1147.857741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1147.857754] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1147.857783] [ 1147.869224] loop4: detected capacity change from 0 to 127 04:00:48 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b", 0x3c) [ 1147.936994] loop7: detected capacity change from 0 to 264192 04:00:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0xedc0, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 1147.965407] loop7: detected capacity change from 0 to 264192 [ 1147.968510] EXT4-fs: Mount option(s) incompatible with ext2 04:00:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xfffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:00:48 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) read(r1, &(0x7f0000000240)=""/34, 0x22) 04:00:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 33) 04:00:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0xef08, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:48 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2", 0x47) [ 1148.102263] loop4: detected capacity change from 0 to 127 [ 1148.114852] EXT4-fs: Mount option(s) incompatible with ext2 [ 1148.126685] loop4: detected capacity change from 0 to 127 [ 1148.138180] EXT4-fs: Mount option(s) incompatible with ext2 04:00:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000001280)=""/214, 0xd6}, {&(0x7f0000001380)=""/247, 0xf7}, {&(0x7f0000001480)=""/190, 0xbe}, {&(0x7f0000001540)=""/232, 0xe8}, {&(0x7f0000001640)=""/238, 0xee}], 0x8) 04:00:48 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:00:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x10040, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:00:48 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b", 0x3c) 04:00:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r2, &(0x7f0000000240)=""/34, 0x22) 04:00:48 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0xa) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write(r2, &(0x7f0000000240)="ec", 0x1) [ 1148.263223] loop4: detected capacity change from 0 to 128 [ 1148.278932] EXT4-fs: Mount option(s) incompatible with ext2 [ 1148.288579] loop4: detected capacity change from 0 to 128 [ 1148.298194] EXT4-fs: Mount option(s) incompatible with ext2 04:00:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0xe0ffff, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:48 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/224, 0xe0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) r3 = socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x3, &(0x7f0000000480)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8c1, 0xffffffffffffffff, &(0x7f0000000100)="82694bfb6a22c685ddde74140e1e54395174858317898f84b4d320e3046de5ee82e7b2423705649e7e1f70538355bfae8c7cdff2f2f36b449456f839291d5ad5a0545f4b36f53a793d9a6e30ce890484b43d5a6c35eae5a2e6a39d16f938bb056b1ec86436ba2d3210b10ab183fffd193a05a31e147582f824dfa274b4d184dcaf00bc9c6c56", 0x86}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000400)="2afd830d1b428a5c3faf1f6aca0f7d1f2ccb41c0dc0e65af", 0x18, 0x0, 0x0, 0x0, r0}]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}]}}) r6 = openat2(r2, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x3e1000, 0x4, 0x14}, 0x18) io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="cb3ea628c15c80db0807480c77f9e0732fb2403eafdb612d36be0298a6ee3df847c306894dfb5158e535362444017d71e8cf3caed183ff64a2fbd94bf400102c1a683d416222fedb3d8412703d09df0e4e28f0fa2900a76f05cc7e01b8c0c6d65d4d26ed3c36e960aabd22d9c0b939e1260ef7134bbbda51cdaaf02a78bcf22ba53de2ca55a15add6dbbcb7856ef5347c43183081c02bf3d017b42ebe5118432c5cd91cf0f13b24c7517", 0xaa, 0x40, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x7, r5, &(0x7f0000000340)="af82ea2cae70c668c2896f7307706fa83204def2fb9c7c", 0x17, 0x9, 0x0, 0x2, r6}]) 04:00:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1148.492702] loop4: detected capacity change from 0 to 512 [ 1148.495855] EXT4-fs: Mount option(s) incompatible with ext2 [ 1148.499380] loop4: detected capacity change from 0 to 512 [ 1148.501579] EXT4-fs: Mount option(s) incompatible with ext2 04:00:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 34) 04:00:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x80000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:00:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x8, 0xf9, 0x7, 0xdc, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8000}, 0x3040, 0x52d18be7, 0x5, 0x3, 0xff, 0x76c, 0x1, 0x0, 0xe7e, 0x0, 0x600000000}, 0x0, 0x8, 0xffffffffffffffff, 0xb) r1 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x80, 0x2, 0x7f, 0xc5, 0x0, 0x2, 0x200, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4a14, 0x1, @perf_config_ext={0x80000000, 0x37f}, 0x11081, 0xfffffffffffffffa, 0x9, 0x2, 0x5, 0xfffffff8, 0x8, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x85, 0x7, 0x5, 0x9, 0x0, 0x7f, 0x90aa6, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xbac, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x200, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, 0xe8, 0x0, 0x10000}, r1, 0xa, r2, 0x1) 04:00:57 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xe0, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xded0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) write(r1, &(0x7f0000000240)="ec", 0x1) 04:00:57 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b", 0x3c) 04:00:57 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:00:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}]}}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r3, &(0x7f0000000100)={r1, r4, 0xfffffffb}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000080)=""/46) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@noextend}]}}) ioctl$SCSI_IOCTL_SYNC(r6, 0x4) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) pipe(&(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d66ff0f000000000000", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',noextend,\x00']) fcntl$getown(r9, 0x9) [ 1157.224499] loop4: detected capacity change from 0 to 1024 [ 1157.233759] EXT4-fs: Mount option(s) incompatible with ext2 [ 1157.240955] loop4: detected capacity change from 0 to 1024 [ 1157.244374] EXT4-fs: Mount option(s) incompatible with ext2 [ 1157.283821] FAULT_INJECTION: forcing a failure. [ 1157.283821] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.285500] CPU: 1 UID: 0 PID: 9145 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1157.285530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1157.285543] Call Trace: [ 1157.285551] [ 1157.285559] dump_stack_lvl+0xfa/0x120 [ 1157.285594] should_fail_ex+0x4d7/0x5e0 [ 1157.285632] should_failslab+0xc2/0x120 [ 1157.285663] __kmalloc_noprof+0xc8/0x760 [ 1157.285697] ? __create_object+0x59/0x80 [ 1157.285731] ? p9_fcall_init+0x97/0x290 [ 1157.285766] ? p9_fcall_init+0x97/0x290 [ 1157.285794] p9_fcall_init+0x97/0x290 [ 1157.285825] p9_tag_alloc+0x20a/0x820 [ 1157.285858] ? __pfx_p9_tag_alloc+0x10/0x10 04:00:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x200000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1157.285890] ? p9_client_create+0x7f1/0x11d0 [ 1157.285920] ? v9fs_session_init+0x1df/0x17a0 [ 1157.285952] p9_client_prepare_req+0x17f/0x460 [ 1157.285985] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1157.286020] ? p9_pollwait+0x1ab/0x210 [ 1157.286044] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1157.286078] p9_client_rpc+0x1a0/0xba0 [ 1157.286114] ? __pfx_p9_client_rpc+0x10/0x10 [ 1157.286144] ? __pfx_p9_pollwait+0x10/0x10 [ 1157.286165] ? __pfx_pipe_poll+0x10/0x10 [ 1157.286193] ? p9_fd_poll+0x1e0/0x2c0 [ 1157.286220] ? p9_fd_create+0x34e/0x530 [ 1157.286244] ? __pfx_p9_fd_create+0x10/0x10 [ 1157.286271] ? p9_client_create+0x78a/0x11d0 [ 1157.286306] p9_client_create+0xbd7/0x11d0 [ 1157.286345] ? __pfx_p9_client_create+0x10/0x10 [ 1157.286376] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1157.286397] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1157.286424] ? kasan_save_track+0x14/0x30 [ 1157.286453] ? __kasan_kmalloc+0x7f/0x90 [ 1157.286483] ? trace_kmalloc+0x1f/0xb0 [ 1157.286510] ? __kmalloc_node_track_caller_noprof+0x2ce/0x760 [ 1157.286536] ? kasan_save_track+0x14/0x30 [ 1157.286566] ? v9fs_session_init+0xeb/0x17a0 [ 1157.286589] ? lockdep_init_map_type+0x4b/0x240 [ 1157.286618] ? __raw_spin_lock_init+0x3a/0x110 [ 1157.286651] v9fs_session_init+0x1df/0x17a0 [ 1157.286673] ? do_raw_spin_lock+0x123/0x260 [ 1157.286703] ? find_held_lock+0x2b/0x80 [ 1157.286734] ? __create_object+0x59/0x80 [ 1157.286768] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1157.286791] ? __pfx_v9fs_session_init+0x10/0x10 [ 1157.286814] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1157.286836] ? __create_object+0x59/0x80 [ 1157.286870] ? trace_kmalloc+0x1f/0xb0 [ 1157.286897] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1157.286928] v9fs_mount+0xbc/0x9e0 [ 1157.286956] ? __pfx_v9fs_mount+0x10/0x10 [ 1157.286984] ? cap_capable+0xdb/0x3b0 [ 1157.287019] ? __pfx_v9fs_mount+0x10/0x10 [ 1157.287045] legacy_get_tree+0x109/0x220 [ 1157.287072] vfs_get_tree+0x93/0x340 [ 1157.287095] path_mount+0x720/0x2120 [ 1157.287123] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1157.287148] ? __pfx_path_mount+0x10/0x10 [ 1157.287177] ? putname.part.0+0x11b/0x160 [ 1157.287210] ? getname_flags.part.0+0x1c6/0x540 [ 1157.287232] ? putname.part.0+0x11b/0x160 [ 1157.287268] __x64_sys_mount+0x293/0x310 [ 1157.287296] ? __pfx___x64_sys_mount+0x10/0x10 [ 1157.287333] do_syscall_64+0xbf/0x390 [ 1157.287362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.287384] RIP: 0033:0x7f71d000eb19 [ 1157.287401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1157.287421] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1157.287442] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 04:00:57 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38e", 0x42) [ 1157.287457] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1157.287470] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1157.287483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.287496] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1157.287524] [ 1157.355013] No source specified [ 1157.359689] loop4: detected capacity change from 0 to 4096 [ 1157.360565] No source specified [ 1157.381124] EXT4-fs: Mount option(s) incompatible with ext2 [ 1157.389728] loop4: detected capacity change from 0 to 4096 [ 1157.396390] EXT4-fs: Mount option(s) incompatible with ext2 04:00:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xf0ffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:00:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:00:57 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000080)=""/49, 0x31) [ 1157.519865] loop4: detected capacity change from 0 to 30847 04:00:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 35) [ 1157.536597] EXT4-fs: Mount option(s) incompatible with ext2 [ 1157.544895] loop4: detected capacity change from 0 to 30847 [ 1157.555184] EXT4-fs: Mount option(s) incompatible with ext2 04:00:57 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38e", 0x42) 04:00:57 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 1157.580230] No source specified [ 1157.587581] No source specified 04:00:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:00:57 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000100)=0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}]}}) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000040)={0x7, 0x2}) [ 1157.703328] loop4: detected capacity change from 0 to 32768 [ 1157.711788] EXT4-fs: Mount option(s) incompatible with ext2 04:01:07 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38e", 0x42) 04:01:07 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$inet(0x2, 0xa, 0xd6) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000780)) write(r1, &(0x7f0000000240)="ec", 0x1) 04:01:07 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) write(r2, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:01:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x1000, @remote, 0xfff}, 0x1c) 04:01:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:01:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 36) 04:01:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:01:07 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x8, 0xf9, 0x7, 0xdc, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8000}, 0x3040, 0x52d18be7, 0x5, 0x3, 0xff, 0x76c, 0x1, 0x0, 0xe7e, 0x0, 0x600000000}, 0x0, 0x8, 0xffffffffffffffff, 0xb) r1 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x80, 0x2, 0x7f, 0xc5, 0x0, 0x2, 0x200, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4a14, 0x1, @perf_config_ext={0x80000000, 0x37f}, 0x11081, 0xfffffffffffffffa, 0x9, 0x2, 0x5, 0xfffffff8, 0x8, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x85, 0x7, 0x5, 0x9, 0x0, 0x7f, 0x90aa6, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xbac, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x200, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, 0xe8, 0x0, 0x10000}, r1, 0xa, r2, 0x1) [ 1166.921017] No source specified [ 1166.921879] No source specified 04:01:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:01:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0xc3002, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) 04:01:07 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 1166.998820] loop4: detected capacity change from 0 to 65536 [ 1167.010531] No source specified [ 1167.014186] EXT4-fs: Mount option(s) incompatible with ext2 [ 1167.020882] loop4: detected capacity change from 0 to 65536 [ 1167.029132] EXT4-fs: Mount option(s) incompatible with ext2 [ 1167.034151] No source specified [ 1167.055853] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 04:01:07 executing program 7: sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x7, 0x0, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x81}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x41}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x101}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x2400c800}, 0x8000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) 04:01:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:01:07 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) [ 1167.192228] loop4: detected capacity change from 0 to 98304 [ 1167.196259] EXT4-fs: Mount option(s) incompatible with ext2 [ 1167.200161] loop4: detected capacity change from 0 to 98304 [ 1167.203698] EXT4-fs: Mount option(s) incompatible with ext2 04:01:17 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 37) 04:01:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x5000000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:01:17 executing program 6: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:01:17 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:01:17 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80", 0x3d) 04:01:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) r1 = getpid() pidfd_open(r1, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x101540, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3f, 0x7, 0x4, 0x5, 0x0, 0x100, 0x1500, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x40080, 0x8, 0x71f, 0x8, 0x3, 0x20, 0x435, 0x0, 0xc59, 0x0, 0x7}, r1, 0x5, r2, 0xa) read(r0, &(0x7f0000000240)=""/34, 0x22) 04:01:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:01:17 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='9p\x00') getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRES16=r1, @ANYBLOB="00f1"]) write(r2, &(0x7f0000000240)="ec", 0x1) [ 1177.355871] No source specified [ 1177.361864] No source specified [ 1177.368798] loop4: detected capacity change from 0 to 131072 [ 1177.399672] 9pnet_fd: Insufficient options for proto=fd [ 1177.421454] EXT4-fs: Mount option(s) incompatible with ext2 04:01:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x6000000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 1177.447841] 9pnet_fd: Insufficient options for proto=fd [ 1177.454515] loop4: detected capacity change from 0 to 131072 [ 1177.475764] EXT4-fs: Mount option(s) incompatible with ext2 04:01:17 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x80, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) pwritev2(r2, &(0x7f00000004c0)=[{&(0x7f0000000340)="2a8942a200aeb966bbf9fb7779c6db49a619fd02a9dddee1d67b5aff7760ad89f949abaf68cd1e955916cd693ade071abbc9e5dd65dabadb281a2ecad31c1585964d6abe9ee7298d4e7005e87f1e328a17dc6452a68ba6ba2c71013c575b855172e5b067df68d5a932be3d9a4146935ebc94953d5d49406628557f931728ce8094404eb53f7289a44e18e1c0e98f8fac1ad2feb62d0737de8455e9c31d9911aede9a732c2c52e1782ceeb80020e582fd84ae3edc3437a9360a7d9dd196a2b2e0c70c0f8d1912fac18282ec56ee42dacc9fa77f8273753bec30eefea69710adfb2724d4fa5efd26d4a8a248f7db488274c1c48814d09e", 0xf6}, {&(0x7f0000000180)="3936bda9a40b2b79f1491c0d8917a1d90368287c8b74de9347edfc274b91393db5f6561cabcbce3e90e3f3a57fb27c7e03688cef40c2e7309abec692768329831a76f39ef190c94135f2c98771278f", 0x4f}, {&(0x7f0000000440)="42e39727701c842873906af9debf4fd8a25a5f2da913849c4e07aed2ee1031ced4dfa932800a4fd7fb54684f9bdc22aadc56622b533a27ab99e7aeead6755129b0fb8047f2c03a11ff89fd7ce2c7e3dd251b92cc72506d4d291e08a979b697764f003053706e347dc25d444a9c1a", 0x6e}], 0x3, 0xfffffffe, 0x1, 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000140)={0x1}) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x1800, &(0x7f0000000100)={0x2, 0x4, 0x40000, {r0}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x6, 0x1, 'queue1\x00', 0x200}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r3, &(0x7f0000000240)=""/34, 0x22) [ 1177.575253] No source specified [ 1177.580956] No source specified 04:01:27 executing program 6: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xe0, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xded0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) write(r1, &(0x7f0000000240)="ec", 0x1) 04:01:27 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80", 0x3d) 04:01:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) 04:01:27 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:01:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x7000000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:01:27 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 38) 04:01:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:01:27 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c723079fd3c2f", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="96ac3babf4ed6ae4695179a6d002d7941dffc6a816231c348de97c2adc09d653fc06ddcb7b58bedf47a050e89e2f32cea1dffabe7a0dcbef2fe2be442fa75b8c04060f5c6ce73dbf1b58538d6d442d0506dd96b768880ad111603410e302d8ca63e22a1e0a73534aa2c432b72e9b5446481c2226ec33646bb5d0f4093a642689436dacfa1754637494814ff2631d71c4c7d637a0c0b254fb010b30852eab5f2d1d1e83635aa723f960342f64c995477ecde55814e8e335e8"]) write(r1, &(0x7f0000000240)="ec", 0x1) [ 1186.859963] loop4: detected capacity change from 0 to 163840 [ 1186.869392] EXT4-fs: Mount option(s) incompatible with ext2 [ 1186.876769] loop4: detected capacity change from 0 to 163840 [ 1186.878661] EXT4-fs: Mount option(s) incompatible with ext2 [ 1186.913979] No source specified [ 1186.921439] No source specified 04:01:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x6000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) [ 1186.937835] 9pnet_fd: Insufficient options for proto=fd 04:01:27 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r1, &(0x7f0000000240)=""/34, 0x22) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) pread64(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x5) ioctl$TIOCSIG(r1, 0x40045436, 0x15) [ 1186.960637] 9pnet_fd: Insufficient options for proto=fd [ 1186.988569] 9pnet_fd: Insufficient options for proto=fd 04:01:27 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 39) 04:01:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x10000000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:01:27 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80", 0x3d) [ 1187.087300] loop4: detected capacity change from 0 to 196608 [ 1187.109258] EXT4-fs: Mount option(s) incompatible with ext2 [ 1187.123641] No source specified [ 1187.128514] No source specified 04:01:37 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 40) 04:01:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0xe9, 0x10, 0x86, 0x0, 0x1, 0x240, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0xb8b1}, 0x5a90, 0x60, 0x1, 0x5, 0xff, 0x2, 0x8000, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xf, r0, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r3 = accept4$packet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe1, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x23) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) fsetxattr$security_capability(r0, &(0x7f0000000280), &(0x7f0000000340)=@v1={0x1000000, [{0x2c, 0x5}]}, 0xc, 0x3) read(r0, &(0x7f0000000240)=""/34, 0x22) 04:01:37 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:01:37 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aa", 0x40) 04:01:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x20000000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:01:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:01:37 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38e", 0x42) 04:01:37 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='tra\x00\x00\x00\x00d,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write(r1, &(0x7f0000000240)="ec", 0x1) [ 1197.136826] loop4: detected capacity change from 0 to 229376 [ 1197.144791] EXT4-fs: Mount option(s) incompatible with ext2 [ 1197.151328] loop4: detected capacity change from 0 to 229376 [ 1197.157996] EXT4-fs: Mount option(s) incompatible with ext2 04:01:37 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write(r2, &(0x7f0000000240)="ec", 0x1) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x20}}, 0x20004085) [ 1197.191215] No source specified [ 1197.195123] No source specified 04:01:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xb000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:01:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x20100000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:01:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 1197.283998] 9pnet_fd: Insufficient options for proto=fd [ 1197.289807] loop4: detected capacity change from 0 to 264192 [ 1197.297904] EXT4-fs: Mount option(s) incompatible with ext2 04:01:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x18000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:01:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x8cffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 1197.414951] loop4: detected capacity change from 0 to 264192 [ 1197.426131] EXT4-fs: Mount option(s) incompatible with ext2 [ 1197.435639] loop4: detected capacity change from 0 to 264192 04:01:37 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8", 0x3e) [ 1197.442370] EXT4-fs: Mount option(s) incompatible with ext2 04:01:37 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 41) 04:01:37 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38e", 0x42) 04:01:37 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x3, 0x2, 0xf7, 0x5, 0x0, 0x6, 0x8, 0x7, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2ba, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x40000, 0x7, 0x20, 0x0, 0x6, 0x871, 0x3, 0x0, 0x1f, 0x0, 0xfff}, r1, 0x6, r0, 0xa) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) clone3(&(0x7f0000000300)={0x200, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x21}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000280), &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) pidfd_getfd(r2, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x81, 0xed, 0x9, 0x3, 0x0, 0x8000, 0x11008, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x9, 0x200000000101}, 0x507c0, 0x8b, 0x8000005, 0x0, 0x4, 0x20, 0x29b4, 0x0, 0x7d8b, 0x0, 0xfffffffffffffeff}, r3, 0x5, r0, 0x2) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r6]) r7 = getuid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000400)={{0x0, r4, r6, r7, 0xffffffffffffffff, 0x1a, 0xaec}, 0x0, 0x0, 0x400, 0x5, 0x0, 0xffffffff, 0x8001, 0x6, 0x8000, 0x4, r3, r1}) read(r2, &(0x7f0000000240)=""/34, 0x22) 04:01:49 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write(0xffffffffffffffff, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:01:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 42) 04:01:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:01:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x1c000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:01:49 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8", 0x3e) 04:01:49 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xa0, 0x1, 0x15, 0x40, 0x0, 0xffffffffffffff00, 0x44001, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x10001}, 0x0, 0x339, 0x6, 0x9, 0x1, 0x6, 0x1, 0x0, 0x7f, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) accept(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x80) write(r1, &(0x7f0000000200), 0x0) 04:01:49 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x80000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="64a9e747476388e25a656275672c71756f74612c6e6f696e69745f697461626cffffffff696e516f66ed7461626c652c6a6f75726e616c5f696f7072696f3d3078307427ddf8c87020f722a7ac2a8f190858e6354eb1966ad7737e1e7b213017c457f5fe27d3fc1ecc34677ae9a774f1f2b122e7d42074c0995474e1bb9a7f5e7b8c9d0b81bf0fa77b6f276111506b3e4d81aa55da7af642f65ce8d0c7babd815d1126d58719dd215b87187e81763487f63e8c215c56e8228fd8c524d6d45a660b8812df332f3ba2eec570d38c2451391040b28cc1435ee9f3ed046ceaf0f8130ec4c1bee97135118e51cffc0c51688e0300d15e87016ab607a0e7cff51eb1fb039cb0ee3f0bea309f5a413ad9e2321eff6d2a7d48eb03f004c4"]) 04:01:49 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) close_range(0xffffffffffffffff, r1, 0x0) [ 1209.598589] No source specified [ 1209.602896] loop6: detected capacity change from 0 to 1024 [ 1209.603105] FAULT_INJECTION: forcing a failure. [ 1209.603105] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.604386] No source specified [ 1209.604888] CPU: 1 UID: 0 PID: 9379 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 1209.604905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1209.604912] Call Trace: [ 1209.604916] [ 1209.604921] dump_stack_lvl+0xfa/0x120 [ 1209.604943] should_fail_ex+0x4d7/0x5e0 [ 1209.604965] should_failslab+0xc2/0x120 [ 1209.604983] __kmalloc_noprof+0xc8/0x760 [ 1209.605001] ? lock_release+0xc8/0x290 [ 1209.605016] ? p9pdu_readf+0xb28/0x1d90 [ 1209.605028] ? __asan_memcpy+0x3d/0x60 [ 1209.605044] ? p9pdu_readf+0xb28/0x1d90 [ 1209.605055] p9pdu_readf+0xb28/0x1d90 [ 1209.605074] ? __pfx_p9pdu_readf+0x10/0x10 [ 1209.605086] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1209.605104] ? p9_fd_create+0x34e/0x530 [ 1209.605117] ? __pfx_p9_fd_create+0x10/0x10 [ 1209.605135] p9_client_create+0xc52/0x11d0 [ 1209.605156] ? __pfx_p9_client_create+0x10/0x10 [ 1209.605173] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1209.605189] ? kasan_save_track+0x14/0x30 [ 1209.605205] ? __kasan_kmalloc+0x7f/0x90 [ 1209.605221] ? trace_kmalloc+0x1f/0xb0 [ 1209.605236] ? __kmalloc_node_track_caller_noprof+0x2ce/0x760 [ 1209.605250] ? kasan_save_track+0x14/0x30 [ 1209.605266] ? v9fs_session_init+0xeb/0x17a0 [ 1209.605280] ? lockdep_init_map_type+0x4b/0x240 [ 1209.605294] ? __raw_spin_lock_init+0x3a/0x110 [ 1209.605313] v9fs_session_init+0x1df/0x17a0 [ 1209.605325] ? do_raw_spin_lock+0x123/0x260 [ 1209.605341] ? find_held_lock+0x2b/0x80 [ 1209.605358] ? __create_object+0x59/0x80 [ 1209.605378] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1209.605390] ? __pfx_v9fs_session_init+0x10/0x10 [ 1209.605403] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1209.605415] ? __create_object+0x59/0x80 [ 1209.605434] ? trace_kmalloc+0x1f/0xb0 [ 1209.605448] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 1209.605460] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1209.605483] v9fs_mount+0xbc/0x9e0 [ 1209.605499] ? __pfx_v9fs_mount+0x10/0x10 [ 1209.605514] ? cap_capable+0xdb/0x3b0 [ 1209.605533] ? __pfx_v9fs_mount+0x10/0x10 [ 1209.605547] legacy_get_tree+0x109/0x220 [ 1209.605563] vfs_get_tree+0x93/0x340 [ 1209.605576] path_mount+0x720/0x2120 [ 1209.605592] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1209.605606] ? __pfx_path_mount+0x10/0x10 [ 1209.605622] ? putname.part.0+0x11b/0x160 [ 1209.605640] ? getname_flags.part.0+0x1c6/0x540 [ 1209.605653] ? putname.part.0+0x11b/0x160 [ 1209.605672] __x64_sys_mount+0x293/0x310 [ 1209.605687] ? __pfx___x64_sys_mount+0x10/0x10 [ 1209.605707] do_syscall_64+0xbf/0x390 [ 1209.605723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.605735] RIP: 0033:0x7f71d000eb19 [ 1209.605745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1209.605757] RSP: 002b:00007f71cd584188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1209.605769] RAX: ffffffffffffffda RBX: 00007f71d0121f60 RCX: 00007f71d000eb19 [ 1209.605776] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1209.605784] RBP: 00007f71cd5841d0 R08: 00000000200002c0 R09: 0000000000000000 [ 1209.605805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1209.605812] R13: 00007ffecc35deef R14: 00007f71cd584300 R15: 0000000000022000 [ 1209.605827] [ 1209.662530] loop4: detected capacity change from 0 to 264192 [ 1209.665767] ext4: Unknown parameter 'd©çGGcˆâZebug' 04:01:49 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8", 0x3e) [ 1209.678732] loop6: detected capacity change from 0 to 1024 [ 1209.684812] ext4: Unknown parameter 'd©çGGcˆâZebug' [ 1209.685753] EXT4-fs: Mount option(s) incompatible with ext2 [ 1209.704421] 9pnet_fd: Insufficient options for proto=fd [ 1209.709922] loop4: detected capacity change from 0 to 264192 [ 1209.731449] EXT4-fs: Mount option(s) incompatible with ext2 04:01:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 43) 04:01:49 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r0, &(0x7f0000000240)=""/34, 0x22) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='/dev/vcsu#\x00') 04:01:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0xef080000, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) 04:01:50 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x1000000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0xc}, 0x2, 0x0, 0x0, 0x9, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x63) sendfile(r3, r4, 0x0, 0xa0103) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r7, 0x0, 0xa0103) syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffff, 0x101000) openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400008b", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25690000000a000600ffffffffffff00000a000600ffffffffffff00000600d400080000000a000600080211000001000008021100000000000500d2000300000000000000526080b4562b9ba4426fac68af19d8e3171f9b20424ccded7ba9e87b0f7e1f570b336162312c21d9a3b10afbc76ac30c4480a716a9f9c81393b25f3b3cc005f5bd3d3294db031ad9d290206cd0dd5b0bc125319b01e66fb915b4718fc3ddc98e09be5f2dd541c1a78d2403a02bcc43424b83ea4cfac2ac99877eef903bdd3c6514415159ec284660d61514b8df95c398adcd0a1d3782e0bb03924b30346abce6d193b36817e560efde0d9f"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008840) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 04:02:00 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2182, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8aac38ec27e1c0fd2fe47ded66d45fb12a6b53b3a83290e4c910022f773145d", 0x5e) 04:02:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e34343631303034383400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000dff4ef821ec34de5a68f275e28ea4831010040000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d7f4655fd7f4655fd7f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000901431899014318900000000d7f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404d7f4655fd7f4655fd7f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d7f4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000d7f4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000d8f4655fd8f4655fd8f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000014a8ae8200000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000d8f4655fd8f4655fd8f4655f00000000000001002000000000000800010000000af3010004000000000000000000000002000000500000000000000000000000000000000000000000000000000000000000000000000000000000001c98117600000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000d8f4655fd8f4655fd8f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3434363130303438342f66696c65302f66696c653000000000000000000000000000000000000000000000125dc13800000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="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", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400000000000000e5ffffffffffffff00"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffd8f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012a00)=ANY=[@ANYBLOB='@']) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) 04:02:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 44) 04:02:00 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8", 0x3f) 04:02:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x40000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:02:00 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write(r1, &(0x7f0000000240)="ec", 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) 04:02:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0xf6ffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 1220.374571] loop4: detected capacity change from 0 to 264192 [ 1220.377720] EXT4-fs: Mount option(s) incompatible with ext2 [ 1220.380834] loop4: detected capacity change from 0 to 264192 [ 1220.382507] EXT4-fs: Mount option(s) incompatible with ext2 04:02:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x40000100, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:02:00 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r2]) fchown(r0, 0x0, r2) r3 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) read(r3, &(0x7f0000000240)=""/34, 0x22) [ 1220.449487] loop6: detected capacity change from 0 to 1024 [ 1220.456208] ext4: Unknown parameter '@' [ 1220.461813] loop6: detected capacity change from 0 to 1024 [ 1220.464588] ext4: Unknown parameter '@' [ 1220.483408] loop4: detected capacity change from 0 to 264192 [ 1220.506093] EXT4-fs: Mount option(s) incompatible with ext2 [ 1220.519681] loop4: detected capacity change from 0 to 264192 04:02:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0xf9fdffff, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,dots,nodots,dots,dots,sys_immutable']) [ 1220.535698] EXT4-fs: Mount option(s) incompatible with ext2 04:02:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 45) 04:02:00 executing program 6: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil) shmdt(r1) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmat(r2, &(0x7f0000ffa000/0x2000)=nil, 0xf000) shmdt(r3) r4 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r4, &(0x7f0000fff000/0x1000)=nil, 0x7000) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmdt(r3) 04:02:00 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) write(r3, &(0x7f0000000240)="ec7e9eb06a0a3b2cb2b84d50c51f84079928acc4496656bcdd8203ae2d840824401a7aa85308ce77771e0429142650cb2a0583ef740487afdb3c578b80d8a8", 0x3f) 04:02:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x66000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='debug,quota,noinit_itable,noinit_itable,journal_ioprio=0x0']) 04:02:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1b96}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r3 = accept4(r0, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x80, 0x80000) dup2(r2, r3) read(r0, &(0x7f0000000240)=""/34, 0x22) [ 1220.655807] loop4: detected capacity change from 0 to 264192 [ 1220.665524] EXT4-fs: Mount option(s) incompatible with ext2 VM DIAGNOSIS: 04:07:06 Registers: info registers vcpu 0 RAX=00000000006f1af7 RBX=0000000000000000 RCX=ffffffff84bd50b7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c9a70 RBP=dffffc0000000000 RSP=ffffffff85c07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff8663e650 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bd3dae RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e53cc000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b5ecc01018 CR3=000000001d249000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00e901fe016c6c6f502e726567616e61 XMM02=696e696d20636578650d0a0100010101 XMM03=6873616d7320636578650a00657a696d XMM04=78650a0073746e696820636578650a00 XMM05=7420636578650a007364656573206365 XMM06=7220726f74756365786511006c61746f XMM07=65672063657865080073747261747365 XMM08=20636578650a00657a696d696e696d20 XMM09=746e696820636578650a006873616d73 XMM10=650a00736465657320636578650a0073 XMM11=756365786511006c61746f7420636578 XMM12=78650800737472617473657220726f74 XMM13=7a7566206365786509006e6567206365 XMM14=74616469646e616320636578650e007a XMM15=000065676169727420636578650b0065 info registers vcpu 1 RAX=000000000082dbdb RBX=0000000000000001 RCX=ffffffff84bd50b7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c9a70 RBP=dffffc0000000000 RSP=ffff888009727e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff8663e650 R13=1ffff110012e4fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bd3dae RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e54cc000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f02061b8010 CR3=000000001d249000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041842efe00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000